kibana中涉及到数据操作时报错
index [XXX] blocked by: [FORBIDDEN/12/index read-only / allow delete (api)]
原因为磁盘空间空间不足,当Elasticsearch运行时检测到磁盘空间超过了95%,为了防止节点耗尽磁盘空间,自动将索引设置为只读模式
解决方案:
打开Elasticsearch目录下的\config\elasticsearch.yml,添加cluster.routing.allocation.disk.watermark.flood_stage: 99%
cluster.routing.allocation.disk.threshold_enabled: false
使用命令,修改全局read_only_allow_delete属性
PUT /_all/_settings
{
"index.blocks.read_only_allow_delete": null
}