Can't create index patterns after x-pack licence expiration

[matiasf (Matias Fernandez)]

Hi,

We have been trying x-pack and the license have expired yesterday. Now can't create index-patterns and said the index y read only (I can delete by curl against elastic).

I try uninstalling the X-pack but the problem persist. Any idea about this issue?

Thanks,
Matías.

[dadoonet (David Pilato)]

Did you uninstall x-pack and restart all nodes?

[matiasf (Matias Fernandez)]

Hello @dadoonet,

Yes, I did it a couple of times. Now I also detect I can't create visualizations, it gives me this error.

Error: blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];: [cluster_block_exception] blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];

[matiasf (Matias Fernandez)]

I check again if x-pack is uninstall and it is.

$ sudo bin/elasticsearch-plugin remove x-pack
-> removing [x-pack]...
ERROR: plugin [x-pack] not found; run 'elasticsearch-plugin list' to get list of installed plugins
$ cd ../kibana/
$ sudo bin/kibana-plugin remove x-pack
Unable to remove plugin because of error: "Plugin [x-pack] is not installed"

[dadoonet (David Pilato)]

Can you run this? https://www.elastic.co/guide/en/elasticsearch/reference/6.2/cluster-allocation-explain.html

[matiasf (Matias Fernandez)]

 GET /_cluster/allocation/explain
 {
   "index": "sen_coso_index",
   "shard": 0,
   "primary": true
 }

And response:

 {
   "index": "sen_coso_index",
   "shard": 0,
   "primary": true,
   "current_state": "started",
   "current_node": {
     "id": "OwxshKdNRJK1WPI8Eyc6_Q",
     "name": "OwxshKd",
     "transport_address": "192.168.98.155:9300",
     "weight_ranking": 1
   },
   "can_remain_on_current_node": "yes",
   "can_rebalance_cluster": "no",
   "can_rebalance_cluster_decisions": [
     {
       "decider": "rebalance_only_when_active",
       "decision": "NO",
       "explanation": "rebalancing is not allowed until all replicas in the cluster are active"
     },
     {
       "decider": "cluster_rebalance",
       "decision": "NO",
       "explanation": "the cluster has unassigned shards and cluster setting [cluster.routing.allocation.allow_rebalance] is set to [indices_all_active]"
     }
   ],
   "can_rebalance_to_other_node": "no",
   "rebalance_explanation": "rebalancing is not allowed"
 }

[dadoonet (David Pilato)]

Please use the </> icon to format your code or markdown style but not the citation icon.

What gives:

GET _cat/indices?v
GET _cat/shards?v