I took a look at the syslogfile you´ve attached.
The file ist 206MB. After deleting all Event with ""Cannot index event" the file is only 96MB. After filtering "blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];. The file is only 70MB.
I´ll try to go deeper.