# All my indexes "read\_only\_allow\_delete" were set to true

**URL:** https://discuss.elastic.co/t/all-my-indexes-read-only-allow-delete-were-set-to-true/181788
**Category:** Elasticsearch
**Created:** [May 20, 2019, 10:21am UTC](https://discuss.elastic.co/t/all-my-indexes-read-only-allow-delete-were-set-to-true/181788 "2019-05-20T10:21:18Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![i333](https://avatars.discourse-cdn.com/v4/letter/i/8491ac/32.png) [@i333](https://discuss.elastic.co/u/i333)
#### Post date: [May 20, 2019, 10:21am UTC](https://discuss.elastic.co/t/all-my-indexes-read-only-allow-delete-were-set-to-true/181788/1 "2019-05-20T10:21:18Z")

</div>

My system almost ran out of disk space so elasticsearch put itself into that offline mode or whatever it is. But when I cleared up the disk space and restarted elasticsearch, it started fine but I found that all my indexes "read\_only\_allow\_delete" has been set to true and I can't write anything to the indexes!

Is this expected and normal behavior or did something go wrong?

Is it safe for me to just remove that setting? How can I do it?

Is there a way to do it for all indexes at once or I'll have to manually do it for all of them?

---

<div class="post-metadata">

### Author: ![Bernt\_Rostad](https://avatars.discourse-cdn.com/v4/letter/b/3ab097/32.png) [@Bernt\_Rostad](https://discuss.elastic.co/u/Bernt_Rostad)
#### Post date: [May 20, 2019, 10:51am UTC](https://discuss.elastic.co/t/all-my-indexes-read-only-allow-delete-were-set-to-true/181788/2 "2019-05-20T10:51:21Z")

</div>

> [@i333](#):
>
> Is this expected and normal behavior or did something go wrong?

Yes, this is the normal behavior when a node is at risk of going full. According to the [Disk-based Shard Allocation](https://www.elastic.co/guide/en/elasticsearch/reference/6.7/disk-allocator.html) docs:

> `cluster.routing.allocation.disk.watermark.flood_stage`
> 
> Controls the flood stage watermark. It defaults to 95%, meaning that Elasticsearch enforces a read-only index block ( `index.blocks.read_only_allow_delete` ) on every index that has one or more shards allocated on the node that has at least one disk exceeding the flood stage. This is a last resort to prevent nodes from running out of disk space. The index block must be released manually once there is enough disk space available to allow indexing operations to continue.

As you see from the last line, this index block must be manually released once you have full control of your cluster, with sufficient disc space on all nodes. You can remove the index block with the command listed in the documentation, something like this:

> PUT /my\_index/\_settings  
> {  
> "index.blocks.read\_only\_allow\_delete": null  
> }

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 17, 2019, 10:51am UTC](https://discuss.elastic.co/t/all-my-indexes-read-only-allow-delete-were-set-to-true/181788/3 "2019-06-17T10:51:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
