# Blocked by: \[TOO\_MANY\_REQUESTS/12/disk usage exceeded flood-stage watermark, index has read-only-allow-delete block\]

**URL:** <https://discuss.elastic.co/t/blocked-by-too-many-requests-12-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/324725>\
**Category:** Elasticsearch\
**Created:** [February 5, 2023, 5:01am UTC](https://discuss.elastic.co/t/blocked-by-too-many-requests-12-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/324725 "2023-02-05T05:01:30Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Baygon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/baygon/32/91792_2.png) [@Baygon](https://discuss.elastic.co/u/Baygon)\
**Post date:** [February 5, 2023, 5:01am UTC](https://discuss.elastic.co/t/blocked-by-too-many-requests-12-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/324725/1 "2023-02-05T05:01:30Z")

</div>

Hi,

I reached disk usage of 90%.  
I increased the disk space and now have 80% usage:

`/dev/root 562G 445G 118G 80% /`

I've tried to run the commands to remove the read only blocker:

```auto
PUT _cluster/settings
{
  "persistent": {
    "cluster.routing.allocation.disk.watermark.low": "90%",
    "cluster.routing.allocation.disk.watermark.high": "95%",
    "cluster.routing.allocation.disk.watermark.flood_stage": "97%"
  }
}

PUT */_settings?expand_wildcards=all
{
  "index.blocks.read_only_allow_delete": null
}

```

However ES still output the same error:

```auto
Feb 5 01:47:37 elastic1 logstash[1704888]: [2023-02-05T01:47:37,200][INFO][logstash.outputs.elasticsearch][twitch_streams_in_progress][459ad5f58b8eabb83dd337c46ccfbb5d7908ed1b3d76624ce088d75da30b94b9] Retrying failed action {:status=>429, :action=>["update", {:_id=>"41290676350", :_index=>"stream_id", :routing=>nil, :_type=>"ts", :retry_on_conflict=>1}, {
.....
], :error=>{"type"=>"cluster_block_exception", "reason"=>"index [sid] blocked by: [TOO_MANY_REQUESTS/12/disk usage exceeded flood-stage watermark, index has read-only-allow-delete block];"}}

```

Any idea what could be the blocker?

This is a single node running ES 7.17.9

I have just upgraded to 7.17 from 7.13.  
I tried to add a document to an index using Kibana dev tools and it worked, but logstash keeps having this issue and does not push a single document

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [February 5, 2023, 5:20am UTC](https://discuss.elastic.co/t/blocked-by-too-many-requests-12-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/324725/2 "2023-02-05T05:20:03Z")

</div>

Perhaps take a look at this [post](https://discuss.elastic.co/t/es-cluster-is-down-indexing-is-not-supported-on-a-read-only-engine/206229/5)

Although I thought in 7.17 it automatically reset those settings..

---

<div class="post-metadata">

**Author:** ![Baygon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/baygon/32/91792_2.png) [@Baygon](https://discuss.elastic.co/u/Baygon)\
**Post date:** [February 5, 2023, 5:31am UTC](https://discuss.elastic.co/t/blocked-by-too-many-requests-12-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/324725/3 "2023-02-05T05:31:13Z")

</div>

Thanks, I've just did that and same.... until I look at logs timestamp.  
What was happening is that logstash yml file had an error, and on each restart attempt of the service, the last error logs which had the message above are thrown again in the syslog output, making me mistakingly believe that there was still the read only issue, but the timerstamp of the log was the one 1 hour ago before I execute the commands.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 5, 2023, 5:31am UTC](https://discuss.elastic.co/t/blocked-by-too-many-requests-12-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/324725/4 "2023-03-05T05:31:50Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.