# Unable to send emails from Watcher Service

**URL:** <https://discuss.elastic.co/t/unable-to-send-emails-from-watcher-service/172869>\
**Category:** Elasticsearch\
**Created:** [March 18, 2019, 9:31pm UTC](https://discuss.elastic.co/t/unable-to-send-emails-from-watcher-service/172869 "2019-03-18T21:31:26Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![jreuth200](https://avatars.discourse-cdn.com/v4/letter/j/e0b2c6/32.png) [@jreuth200](https://discuss.elastic.co/u/jreuth200)\
**Post date:** [March 18, 2019, 9:31pm UTC](https://discuss.elastic.co/t/unable-to-send-emails-from-watcher-service/172869/1 "2019-03-18T21:31:26Z")

</div>

Hello,

I'm using ELK 6.5 currently vetting out the Platinum Trial (Xpack) and am attempting to send notifications using the Watcher service. When trying to send a 'test' email from Kibana, the following error message is generated:

"[cluster\_block\_exception] blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];"

Similar issues suggest this problem may be generated by low disk space, but the data nodes in our cluster have been cleaned to ensure we are far below the problematic threshold (currently only sitting around 12% memory usage). Our cluster is currently in a 'green' state with all shards having already been allocated. What else might cause this issue?

Jared

---

<div class="post-metadata">

**Author:** ![DavidTurner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/32/22453_2.png) [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)\
**Post date:** [March 19, 2019, 10:10pm UTC](https://discuss.elastic.co/t/unable-to-send-emails-from-watcher-service/172869/2 "2019-03-19T22:10:00Z")

</div>

This block really only comes about through low disk space, but [the block is not automatically cleared when the disk space is freed](https://www.elastic.co/guide/en/elasticsearch/reference/current/disk-allocator.html). The link above includes instructions on how to clear this block when you have brought your disk usage under control and are ready to continue indexing.

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [March 20, 2019, 8:09am UTC](https://discuss.elastic.co/t/unable-to-send-emails-from-watcher-service/172869/3 "2019-03-20T08:09:23Z")

</div>

You can use

```auto
GET _settings?filter_path=**.read_only_allow_delete

```

to find out which indices are affected by this

---

<div class="post-metadata">

**Author:** ![jreuth200](https://avatars.discourse-cdn.com/v4/letter/j/e0b2c6/32.png) [@jreuth200](https://discuss.elastic.co/u/jreuth200)\
**Post date:** [March 20, 2019, 2:29pm UTC](https://discuss.elastic.co/t/unable-to-send-emails-from-watcher-service/172869/4 "2019-03-20T14:29:49Z")

</div>

Thank you for your responses. I completed the steps above, and now show that all of my indices have read\_only\_allow\_delete set to false. However, my error is still present and has not been resolved. I still show

[cluster\_block\_exception] blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];

Whenever an email is about to be sent.

Please advise.

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [March 20, 2019, 2:45pm UTC](https://discuss.elastic.co/t/unable-to-send-emails-from-watcher-service/172869/5 "2019-03-20T14:45:24Z")

</div>

can you paste the response of the above command and in addition also put the response of `GET _settings` in a gist or pastebin ( **NOTE: This might contain sensitive data, so check before putting it in a gist** )

Thanks.

---

<div class="post-metadata">

**Author:** ![jreuth200](https://avatars.discourse-cdn.com/v4/letter/j/e0b2c6/32.png) [@jreuth200](https://discuss.elastic.co/u/jreuth200)\
**Post date:** [March 20, 2019, 9:04pm UTC](https://discuss.elastic.co/t/unable-to-send-emails-from-watcher-service/172869/6 "2019-03-20T21:04:19Z")

</div>

Are you able to provide an email for me to send that data? It's 28,000 lines and pastebin will not allow that quantity of data for standard users.

Thanks,

Jared

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 17, 2019, 9:04pm UTC](https://discuss.elastic.co/t/unable-to-send-emails-from-watcher-service/172869/7 "2019-04-17T21:04:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.