I had a really large logstash.log file which filled up the hdd I deleted the file and restarted the service now I I get this Aug 12 16:54:13 SCL-SIEM-01 logstash[3096]: [2019-08-12T16:54:13,127][WARN ][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=>400, :action=>[…

[WARN ][logstash.outputs.elasticsearch] Could not index event to Elasticsearch

Badger August 12, 2019, 4:32pm 2

Is that really the complete error message?

If you filled the disk and elasticsearch is writing indexes to the same disk then this should help.

Topic		Replies	Views
Could Not Index Event to Elasticsearch Error? Elasticsearch	15	1120	October 11, 2022
Could Not Index event to Elasticsearch Elasticsearch	4	1592	October 19, 2021
Logstash, Could not index event to Elasticsearch Logstash	4	1589	August 4, 2020
Could not index event to Elasticsearch DataStream Elasticsearch datastreams	6	3880	May 19, 2022
Could not index event to Elasticsearch Logstash	5	890	January 12, 2022