# PUT .kibana/\_settings { "index": { "blocks": { "read\_only\_allow\_delete": "false" } } }

**URL:** https://discuss.elastic.co/t/put-kibana-settings-index-blocks-read-only-allow-delete-false/164381
**Category:** Kibana
**Created:** [January 15, 2019, 10:17pm UTC](https://discuss.elastic.co/t/put-kibana-settings-index-blocks-read-only-allow-delete-false/164381 "2019-01-15T22:17:07Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![OpSecMonkey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/opsecmonkey/32/46110_2.png) [@OpSecMonkey](https://discuss.elastic.co/u/OpSecMonkey)
#### Post date: [January 15, 2019, 10:17pm UTC](https://discuss.elastic.co/t/put-kibana-settings-index-blocks-read-only-allow-delete-false/164381/1 "2019-01-15T22:17:07Z")

</div>

Good afternoon everyone,

So today I was running my config with logstash and everything was working great and then all of a sudden I got this error message with Kibana. It just repeats over and over and over again.

```
[2019-01-15T17:12:11,362][INFO][logstash.outputs.elasticsearch] retrying failed action with response code: 403 ({"type"=>"cluster_block_exception", "reason"=>"blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];"})
[2019-01-15T17:12:11,363][INFO][logstash.outputs.elasticsearch] retrying failed action with response code: 403 ({"type"=>"cluster_block_exception", "reason"=>"blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];"})
[2019-01-15T17:12:11,363][INFO][logstash.outputs.elasticsearch] retrying failed action with response code: 403 ({"type"=>"cluster_block_exception", "reason"=>"blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];"})
[2019-01-15T17:12:11,363][INFO][logstash.outputs.elasticsearch] Retrying individual bulk actions that failed or were rejected by the previous bulk request. {:count=>125}

```

I have plenty of HD space left 1TB of space left still. I am unsure of what I need to be doing to get it to work again. I have tried restarting, restarting services and so on. I even found a solution someone posted that was:

```
PUT .kibana/_settings
{
"index": {
"blocks": {
"read_only_allow_delete": "false"
}
}
}

```

I tried that and it didnt work.

and I still get the same error. I have about 500 more gigs of CSV files that need to be indexed.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [January 15, 2019, 10:19pm UTC](https://discuss.elastic.co/t/put-kibana-settings-index-blocks-read-only-allow-delete-false/164381/2 "2019-01-15T22:19:18Z")

</div>

Are you indexing into the `.kibana` index? If not then running that curl won't impact any other index that you may be indexing into

---

<div class="post-metadata">

### Author: ![OpSecMonkey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/opsecmonkey/32/46110_2.png) [@OpSecMonkey](https://discuss.elastic.co/u/OpSecMonkey)
#### Post date: [January 15, 2019, 11:47pm UTC](https://discuss.elastic.co/t/put-kibana-settings-index-blocks-read-only-allow-delete-false/164381/3 "2019-01-15T23:47:47Z")

</div>

I am using Kibana

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [January 16, 2019, 6:54am UTC](https://discuss.elastic.co/t/put-kibana-settings-index-blocks-read-only-allow-delete-false/164381/4 "2019-01-16T06:54:16Z")

</div>

This typically indicates that you have exceeded the flood stage watermark and that your storage is almost full. Can you please show the full output of `df -k` (assuming linux) as well as how your Elasticsearch data path is configured (may depend on how it was installed)? My guess is that your data path might not be what you expect it to be.

---

<div class="post-metadata">

### Author: ![OpSecMonkey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/opsecmonkey/32/46110_2.png) [@OpSecMonkey](https://discuss.elastic.co/u/OpSecMonkey)
#### Post date: [January 16, 2019, 7:43pm UTC](https://discuss.elastic.co/t/put-kibana-settings-index-blocks-read-only-allow-delete-false/164381/5 "2019-01-16T19:43:37Z")

</div>

How can I tell this?

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [January 16, 2019, 7:52pm UTC](https://discuss.elastic.co/t/put-kibana-settings-index-blocks-read-only-allow-delete-false/164381/6 "2019-01-16T19:52:13Z")

</div>

Which operating system are you using? How did you install Elasticsearch?

---

<div class="post-metadata">

### Author: ![OpSecMonkey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/opsecmonkey/32/46110_2.png) [@OpSecMonkey](https://discuss.elastic.co/u/OpSecMonkey)
#### Post date: [January 16, 2019, 7:54pm UTC](https://discuss.elastic.co/t/put-kibana-settings-index-blocks-read-only-allow-delete-false/164381/7 "2019-01-16T19:54:21Z")

</div>

I am using CentOS 7 and I installed it with the packages on the site. everything is pretty much default setup except for my config file.

I should also add its in ESXi 6.0 container.

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [January 17, 2019, 5:28am UTC](https://discuss.elastic.co/t/put-kibana-settings-index-blocks-read-only-allow-delete-false/164381/8 "2019-01-17T05:28:12Z")

</div>

What is the output of `df -k` on the host? Have you made any changes to the data path in `elasticsearch.yml` file?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 14, 2019, 5:28am UTC](https://discuss.elastic.co/t/put-kibana-settings-index-blocks-read-only-allow-delete-false/164381/9 "2019-02-14T05:28:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
