Elasticsearch Errors not indexing data

Elastic Stack Elasticsearch
1

Hey guys, I'm having some problems on running the ELK.

Elasticsearch is giving a lot of exceptions and errors:

[2019-03-15T12:17:27,369][WARN ][r.suppressed             ] path: /.kibana/doc/config%3A6.4.2, params: {index=.kibana, id=config:6.4.2, type=doc}
org.elasticsearch.cluster.block.ClusterBlockException: blocked by: [SERVICE_UNAVAILABLE/1/state not recovered / initialized];


[2019-03-15T12:17:27,408][WARN ][r.suppressed             ] path: /.reporting-*/_search, params: {index=.reporting-*, filter_path=hits.total,aggregations.jobTypes.buckets,aggregations.objectTypes.buckets,aggregations.layoutTypes.buckets,aggregations.statusTypes.buckets}
org.elasticsearch.cluster.block.ClusterBlockException: blocked by: [SERVICE_UNAVAILABLE/1/state not recovered / initialized];

[2019-03-15T12:17:27,568][WARN ][o.e.x.s.a.s.m.NativeRoleMappingStore] [TSRytIG] Failed to clear cache for realms [[]]

[2019-03-15T12:17:37,873][INFO ][o.e.c.r.a.AllocationService] [TSRytIG] Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[winlogbeat-6.5.4-2019.03.06][1], [winlogbeat-6.5.4-2019.03.06][3]] ...]).

Meanwhile, on the Logstash side, I get all these errors:

[2019-03-15T12:26:46,058][INFO ][logstash.outputs.elasticsearch] retrying failed action with response code: 403 ({"type"=>"cluster_block_exception", "reason"=>"blocked by: [FORBIDDEN/8/index write (api)];"})
[2019-03-15T12:26:46,058][INFO ][logstash.outputs.elasticsearch] Retrying individual bulk actions that failed or were rejected by the previous bulk request. {:count=>117}

I know usually this means I don't have much disk space, but I actually do, as I can see in the Monitoring.

Any tips on this errors? Logs don't get indexed....

2

Does anyone have any ideia of what might be wrong?

3

Hi,

Are your cluster and indices Green ?

bye,
Xavier

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.