ELK 报错：retrying failed action with response code: 403、 flood stage disk watermark

原创

已于 2024-04-03 16:00:55 修改 · 677 阅读

4 ·

CC 4.0 BY-SA版权

文章标签：

#elk

于 2024-04-03 14:24:08 首次发布

logstash报错：

[2024-04-03T05:38:33,694][INFO ][logstash.outputs.elasticsearch] retrying failed action with response code: 403 ({“type”=>“cluster_block_exception”, “reason”=>“blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];”})

es报错：

[2024-04-03T05:36:54,995][WARN ][o.e.c.r.a.DiskThresholdMonitor] [NyCgwKD] flood stage disk watermark [95%] exceeded on [NyCgwKDuTtKWM61BZPdlVA][NyCgwKD][/usr/share/elasticsearch/data/nodes/0] free: 2.3gb[2.3%], all indices on this node will be marked read-only
[2024-04-03T05:37:24,996][WARN ][o.e.c.r.a.DiskThresholdMonitor] [NyCgwKD] flood stage disk watermark [95%] exceeded on [NyCgwKDuTtKWM61BZPdlVA][NyCgwKD][/usr/share/elasticsearch/data/nodes/0] free: 2.3gb[2.3%], all indices on this node will be marked read-only
[2024-04-03T05:37:54,997][WARN ][o.e.c.r.a.DiskThresholdMonitor] [NyCgwKD] flood stage disk watermar