Logstash-Elastic problems


(Ninoslav) #1

Hi gys,

I am using ELK stack 6.0, and it worked nice, till 2 day before, I have obviosuly done something rly wrong,
and my logstash is not working correctly.

My logstash log got flooded with logs like:

[2018-02-14T17:15:36,862][INFO ][logstash.outputs.elasticsearch] retrying failed action with response code: 403 ({"type"=>"cluster_block_exception", "reason"=>"blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];"})
[2018-02-14T17:15:36,862][INFO ][logstash.outputs.elasticsearch] Retrying individual bulk actions that failed or were rejected by the previous bulk request. {:count=>10}

It is been like 3 GB of data in log, and 0 data in elasctic search.

Is someone could point me what to do.
From log it seems like some index is marked as read only, but i cant remember ever doing something like that.

Thanks in advance.

Cheers.

Ninoslav.