Per parent ticket, several Elastic hosts have failed to reimage. Most of the time when this happens, the hosts come back up and rejoin the cluster.

This is causing the cluster to stay in yellow status, because any primary shard hosted on these "ghost" hosts cannot replicate to OpenSearch hosts.

Banning the hosts should force the primary shards onto OpenSearch (cirrussearch) hosts, allowing the cluster to return to green status.

Creating this ticket to:

• Find and ban all elastic hosts
• Force shards to be redistributed
• Confirm operation