Select statemet results in a blocked write attempt

Elastic Stack Elasticsearch
1

I tried to access data created by greylog in a elasticsearch index
using:

As reference i should get the contents of greylog_10 with:

curl -X POST "localhost:9200/_sql?format=txt&pretty" -H 'Content-Type: application/json' -d'
{
  "query": "SELECT * "
}
'

but that gives me:
{"error":"Incorrect HTTP method for uri [/_sql?format=text] and method [POST], allowed: [PUT, HEAD, GET, DELETE]","status":405}

or

curl -X POST "localhost:9200/_sql?format=txt&pretty" -H 'Content-Type: application/json' -d'
{
"query": "SELECT * FROM greylog_10"
}
'
And this somehow attempts to write something?
Response:
'{"error":{"root_cause":[{"type":"cluster_block_exception","reason":"blocked by: [FORBIDDEN/8/index write (api)];"}],"type":"cluster_block_exception","reason":"blocked by: [FORBIDDEN/8/index write (api)];"},"status":403}'

How does that match up with:

according to

greylog_10 should behave like a table in that example. And why would a SELECT statement ever write to the DB?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.