How to rebuild .watches

Elastic Stack Elasticsearch
1

Hi Team,
we had couple of ES nodes failure last week and after that we rebuild most of the indexes. i closed .watches index that time because shards were missing. Now ES is up and running but watcher is not.

I tried to open .watches index but it says shards are missing (UNASSIGNED) and cluster becomes red. I tried to delete the .watches index but got below error:

{
"error": "This endpoint is not supported for DELETE on .watches index.",
"status": 400
}

How can i rebuild .watches index now? In a post i read to restart watcher, how to to that?

Thanks & Regards,

2

Please respond, it's important. All alerts are blocked for now.

3

Hey,

the troubleshooting section has some information how to delete the watches index if necessary. Be sure you have set watcher.index.rest.direct_access: true in your elasticsearch.yml file

--Alex

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.