Logstash Error(block_exception)

에러로그

[2019-07-15T09:30:22,294][INFO ][logstash.outputs.elasticsearch] retrying failed action with response code: 403
({"type"=>"cluster_block_exception", "reason"=>"blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];"}) [2019-07-15T09:30:22,295][INFO ][logstash.outputs.elasticsearch] Retrying individual bulk actions that failed or were rejected by the previous bulk request. {:count=>2}

원인

데이터 저장 공간이 부족 해 지면 kibana 세팅이 자동으로 read-only로 변경되는 듯 함

조치방법

클러스터 레벨

PUT _settings
  {
   "index": {
    "blocks": {
	"read_only_allow_delete": "false"
	}
	}
	}

인덱스 레벨

PUT <index_name>/_settings
  {
   "index": {
    "blocks": {
	"read_only_allow_delete": "false"
	}
	}
	}