Filebeat stop to harvest for nginx log [Solved]

Elastic Stack Beats
2

Hi everyone,
finally I solved and I share the solution hoping it can be useful to others.
Reading filebeat docs , I realized that the problem could be in logstash and then I also analyzed its log:

FORBIDDEN/12/index read-only / allow delete (api)]

so I found the answer in this Topic:

i think my problem is low storage. just check your storage first. when it's low, kibana auto changes its config to read-only mode.

So I solved my problem by increasing disk space on the elasticsearch host and removing the read-only mode on the indices by running in kibana:

PUT _settings
{
  "index": {
    "blocks": {
      "read_only_allow_delete": "false"
    }
  }
}