# Https://discuss.elastic.co/t/config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api/113361

**URL:** <https://discuss.elastic.co/t/https-discuss-elastic-co-t-config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api-113361/130296>\
**Category:** Kibana\
**Created:** [May 2, 2018, 4:12pm UTC](https://discuss.elastic.co/t/https-discuss-elastic-co-t-config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api-113361/130296 "2018-05-02T16:12:29Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![rouchad\_rouchad](https://avatars.discourse-cdn.com/v4/letter/r/4491bb/32.png) [@rouchad\_rouchad](https://discuss.elastic.co/u/rouchad_rouchad)\
**Post date:** [May 2, 2018, 4:12pm UTC](https://discuss.elastic.co/t/https-discuss-elastic-co-t-config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api-113361/130296/1 "2018-05-02T16:12:29Z")

</div>

hello everybody ! please i need your help !!  
the index got put into a read only state for some other reason, i reverse this by :

curl -XPUT -H "Content-Type: application/json" [http://localhost:9200/.monitoring-\*/\_settings](http://localhost:9200/.monitoring-*/_settings) -d '{"index.blocks.read\_only\_allow\_delete": null}'

but when i do it i got this error :

C:\Users\goldenBoy\>curl -XPUT -H "Content-Type: application/json" [http://localhost:9200/.monitoring-\*/\_settings](http://localhost:9200/.monitoring-*/_settings) -d '{"index.blocks.read\_only\_allow\_delete": null}'  
{"error":{"root\_cause":[{"type":"json\_parse\_exception","reason":"Unexpected character (''' (code 39)): expected a valid value (number, String, array, object, 'true', 'false' or 'null')\n at [Source: org.elasticsearch.transport.netty4.ByteBufStreamInput@197352e7; line: 1, column: 2]"}],"type":"json\_parse\_exception","reason":"Unexpected character (''' (code 39)): expected a valid value (number, String, array, object, 'true', 'false' or 'null')\n at [Source: org.elasticsearch.transport.netty4.ByteBufStreamInput@197352e7; line: 1, column: 2]"},"status":500}curl: (3) [globbing] unmatched close brace/bracket in column 5

---

<div class="post-metadata">

**Author:** ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)\
**Post date:** [May 2, 2018, 5:55pm UTC](https://discuss.elastic.co/t/https-discuss-elastic-co-t-config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api-113361/130296/2 "2018-05-02T17:55:00Z")

</div>

Hey @rouchad_rouchad, that curl command works for me, which version of Elasticsearch are you running, and do you have a reverse proxy in front of Elasticsearch?

---

<div class="post-metadata">

**Author:** ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)\
**Post date:** [May 2, 2018, 6:02pm UTC](https://discuss.elastic.co/t/https-discuss-elastic-co-t-config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api-113361/130296/3 "2018-05-02T18:02:07Z")

</div>

I just noticed that you were on Windows, try using this instead:

```auto
curl -XPUT -H "Content-Type: application/json" http://localhost:9200/.monitoring-*/_settings -d "{\"index.blocks.read_only_allow_delete\": null}"

```

---

<div class="post-metadata">

**Author:** ![rouchad\_rouchad](https://avatars.discourse-cdn.com/v4/letter/r/4491bb/32.png) [@rouchad\_rouchad](https://discuss.elastic.co/u/rouchad_rouchad)\
**Post date:** [May 3, 2018, 9:14am UTC](https://discuss.elastic.co/t/https-discuss-elastic-co-t-config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api-113361/130296/4 "2018-05-03T09:14:59Z")

</div>

thank you Mr Brandon... i use elasticsearch 6.2.3  
i try ths solutiob but i get this error :  
{"error":{"root\_cause":[{"type":"index\_not\_found\_exception","reason":"no such index","resource.type":"index\_or\_alias","resource.id":".monitoring-_","index\_uuid":"na","index":".monitoring-_"}],"type":"index\_not\_found\_exception","reason":"no such index","resource.type":"index\_or\_alias","resource.id":".monitoring-_","index\_uuid":"na","index":".monitoring-_"},"status":404}

what i need to do ?  
! thank u very much

---

<div class="post-metadata">

**Author:** ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)\
**Post date:** [May 3, 2018, 11:49am UTC](https://discuss.elastic.co/t/https-discuss-elastic-co-t-config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api-113361/130296/5 "2018-05-03T11:49:10Z")

</div>

Which index are you trying to turn-off read only mode on? That command that you're executing will update that setting in index patterns that match `monitoring-*` and the error message is alluding to those indices not existing.

---

<div class="post-metadata">

**Author:** ![rouchad\_rouchad](https://avatars.discourse-cdn.com/v4/letter/r/4491bb/32.png) [@rouchad\_rouchad](https://discuss.elastic.co/u/rouchad_rouchad)\
**Post date:** [May 7, 2018, 1:20pm UTC](https://discuss.elastic.co/t/https-discuss-elastic-co-t-config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api-113361/130296/6 "2018-05-07T13:20:35Z")

</div>

hi Brandon ;  
I want to enter a new index "emails" but I can not see it on kibana , i don't know why ... when i execute Logstash i got the index name in kibana but when i want to see the result there is nothing  
just the name of the index emails

---

<div class="post-metadata">

**Author:** ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)\
**Post date:** [May 7, 2018, 5:11pm UTC](https://discuss.elastic.co/t/https-discuss-elastic-co-t-config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api-113361/130296/7 "2018-05-07T17:11:31Z")

</div>

Hey @rouchad_rouchad, Kibana introduces the concept of an "Index Pattern" in addition to the indices that are already created in Elasticsearch. To begin to use Kibana with the new "emails" index, you'll want to create a new Index Pattern in Kibana per: [https://www.elastic.co/guide/en/kibana/current/index-patterns.html](https://www.elastic.co/guide/en/kibana/current/index-patterns.html)

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [May 7, 2018, 7:17pm UTC](https://discuss.elastic.co/t/https-discuss-elastic-co-t-config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api-113361/130296/8 "2018-05-07T19:17:03Z")

</div>

The error you listed may mean you are running out of available disk space and have exceeded the 95% flood watermark. Can you check whether this is the case?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 4, 2018, 7:17pm UTC](https://discuss.elastic.co/t/https-discuss-elastic-co-t-config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api-113361/130296/9 "2018-06-04T19:17:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
