Metricbeat service not indexing data in elasticsearch

Elastic Stack Beats
1

Windows Server 2008 R2 Standard
metricbeat-6.4.0

I am getting below error in metricbeat:

elasticsearch/client.go:520 Cannot index event publisher.Event{Content:beat.Event{Timestamp:time.Time{wall:0xbee9999910ae25d0, ext:5100668741501, loc:(*time.Location)(0x29456e0)}, Meta:common.MapStr(nil), Fields:common.MapStr{"system":common.MapStr{"core":common.MapStr{"idle":common.MapStr{"pct":0.5369}, "nice":common.MapStr{"pct":0}, "softirq":common.MapStr{"pct":0}, "steal":common.MapStr{"pct":0}, "irq":common.MapStr{"pct":0}, "user":common.MapStr{"pct":0.2964}, "iowait":common.MapStr{"pct":0}, "id":0, "system":common.MapStr{"pct":0.1666}}}, "metricset":common.MapStr{"name":"core", "module":"system"}, "beat":common.MapStr{"name":"IN-AIR-INEADM", "hostname":"IN-AIR-INEADM", "version":"6.4.0"}, "host":common.MapStr{"name":"IN-AIR-INEADM"}}, Private:interface {}(nil)}, Flags:0x0} (status=403): {"type":"cluster_block_exception","reason":"blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];"}

2

It can be an indication that you Elasticsearch cluster is running out of disk space.

3

Thanks, actually my disk was 96% occupied. After emptying, metricbeat is indexing data.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.