Could not index event to Elasticsearch - no write index is defined for alias

Elastic Stack Logstash
1

Hi guys,

we are facing an issue on our ELK infrastructure:

[WARN ][logstash.outputs.elasticsearch][main] Could not index event to Elasticsearch. {:status=>400, :action=>["index", {:_id=>nil, :_index=>"logstash-rollover-alias", :routing=>nil, :_type=>"_doc"}, #LogStash::Event:0x545737ec], :response=>{"index"=>{"_index"=>"logstash-rollover-alias", "_type"=>"_doc", "_id"=>nil, "status"=>400, "error"=>{"type"=>"illegal_argument_exception", "reason"=>"no write index is defined for alias [logstash-rollover-alias]. The write index may be explicitly disabled using is_write_index=false or the alias points to multiple indices without one being designated as a write index"}}}}

Could somebody help, thanks.

2

Hi, Set write_index to the alias [logstash-rollover-alias].

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.