After I ran these queries, my filebeat index isn't collecting data on discover and gives me following error-
PUT filebeat-7.4.0-2019.11.08-000001/_settings
{
"index": {
"blocks": {
"read_only_allow_delete": "false"
}
}
}
POST /filebeat-7.4.0-2019.11.08-000001/_shrink/filebeat-7.4.0-2019.11.18-000001
{
"settings": {
"index.routing.allocation.require._name": null,
"index.blocks.write": true
}
}
Error-
Index lifecycle error
cluster_block_exception: index [filebeat-7.4.0-2019.11.08-000001] blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];
The error also says, Current Action: rollover and Failed Step: check-rollover-ready. Please help how to undo this.