[SOLVED] Filebeats not writing data

Hi, my Nginx Filebeat module stopped to write data to ES.

({"type"=>"cluster_block_exception", "reason"=>"blocked by: [FORBIDDEN/12/index read-only / allow delete (api)]

It was solved by:

PUT _settings
{
"index": {
"blocks": {
"read_only_allow_delete": "false"
}
}
}

But why the index got in read-only state in the first place?
How I can debug and prevent such situations?

That is often a sign that you are running out of disk space in Elasticsearch and have exceeded the flood-stage watermark.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.