Delete by query api - ClusterBlockException[blocked by: [FORBIDDEN/8/index write (api)];] status": 403

Elastic Stack Elasticsearch
1

Hi,

I'm trying to delete data by query from our elastic search cluster. If i
run the delete on the current active index it works fine.

However if i try to run the delete against an older index ( which is still
open ) I get an exception.

{
"error": "ClusterBlockException[blocked by: [FORBIDDEN/8/index write
(api)];]",
"status": 403
}

The query is http://1.2.3.4:9200/graylog2_102/message/_query

{
"size": 3,
"query": {
"match": {"message": "apples"}
}}

Can you advise on how to delete these specifc 'apple' messages without
deleting the whole index ?

Thanks

Paul.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/e1807c73-3edd-4a86-b419-2197a0d95e30%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

2

Does anyone have any experience of this problem ?

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/70d27670-a9f3-43a5-b6ab-2f0c93e2b5ba%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

3

Bump... Anyone ?

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/53b9506b-78c9-4219-b46b-86b4125a42ae%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

4

Did you get an answer to this? I've just had the same {"error":"ClusterBlockException[blocked by: [FORBIDDEN/8/index write (api)];]","status":403} response .....

5

Came across the same issue. Any solution yet ?

Request to Elasticsearch failed: "ClusterBlockException[blocked by: [FORBIDDEN/8/index write (api)];]"

6

The reason for this in my case was that the ES machine ran out of space. I had to increase disk space. Hope that helps.

1 Like
7

Yap, Check your free space

8

I also got same issue but my disk still have a lot free storage space.

wondering why it can happen.

9

Having the same issue , could someone help to find the root cause ?