Your Elasticsearch index has turned read-only, that's why Winlogbeat can't ship the logs.
It might be that Elasticsearch is running out of disk, or other reasons.
Have a look at FORBIDDEN/12/index read-only / allow delete (api)]
Your Elasticsearch index has turned read-only, that's why Winlogbeat can't ship the logs.
It might be that Elasticsearch is running out of disk, or other reasons.
Have a look at FORBIDDEN/12/index read-only / allow delete (api)]
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.