Hi gys,
I am using ELK stack 6.0, and it worked nice, till 2 day before, I have obviosuly done something rly wrong,
and my logstash is not working correctly.
My logstash log got flooded with logs like:
[2018-02-14T17:15:36,862][INFO ][logstash.outputs.elasticsearch] retrying failed action with response code: 403 ({"type"=>"cluster_block_exception", "reason"=>"blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];"})
[2018-02-14T17:15:36,862][INFO ][logstash.outputs.elasticsearch] Retrying individual bulk actions that failed or were rejected by the previous bulk request. {:count=>10}
It is been like 3 GB of data in log, and 0 data in elasctic search.
Is someone could point me what to do.
From log it seems like some index is marked as read only, but i cant remember ever doing something like that.
Thanks in advance.
Cheers.
Ninoslav.