Centos 7, elasticsearch 5.x.

I am tracing an issue where elasticsearch becomes non responsive to logstash. (both running locally)

I measure the open handles, as we have had problems on the logstash side with this.

Today, when I run the below:

ls -al /proc/`pgrep -f elasticsearch`/fd

I see something I have never seen before: Some output lines in red (see below).

What does the red mean?

enter image description here


2 Answers 2


It's a broken symlink. But since those FDs are open on virtual objects it's impossible to resolve them within the context of the filesystem regardless.


From this link

Red: Archive file
Red with black background: Broken link

In your case, those are broken links.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.