# Graylog elasticsearch -problem

**URL:** <https://community.graylog.org/t/graylog-elasticsearch-problem/14052>\
**Category:** Graylog Central (peer support)\
**Created:** [February 19, 2020, 7:14pm UTC](https://community.graylog.org/t/graylog-elasticsearch-problem/14052 "2020-02-19T19:14:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Zaca\_Zaca011](https://avatars.discourse-cdn.com/v4/letter/z/7ba0ec/32.png) [@Zaca\_Zaca011](https://community.graylog.org/u/Zaca_Zaca011)\
**Post date:** [February 19, 2020, 7:14pm UTC](https://community.graylog.org/t/graylog-elasticsearch-problem/14052/1 "2020-02-19T19:14:12Z")

</div>

Hi , I am new here , so hello to everyone 🙂  
Last week I started using graylog server for collecting logs from vCSA.  
and there was no problem ,at least I thought so. After four hours it seemed to stop indexing .  
Greylog received a message on interface but there were some problem .

On overview page there is line :  
**There were 204,794 failed indexing attempts in the last 24 hours.**  
a few seconds ago graylog\_0 e4630a50-534b-11ea-8c3a-005056a0b7bf {“type”:“cluster\_block\_exception”,“reason”:“blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];”}

---

<div class="post-metadata">

**Author:** ![tmacgbay](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tmacgbay/32/3878_2.png) [@tmacgbay](https://community.graylog.org/u/tmacgbay)\
**Post date:** [February 19, 2020, 9:03pm UTC](https://community.graylog.org/t/graylog-elasticsearch-problem/14052/2 "2020-02-19T21:03:18Z")

</div>

Likely that you ran out of disk space for the elasticsearch server here is a related post I googled up for ya:

> [@Indexer Failures NEW](https://community.graylog.org/t/indexer-failures-new/10502):
>
> Hi GrayLog worked fine. SUDDENLY - i get this error {“type”:“cluster\_block\_exception”,“reason”:“blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];”} and no new data is showing please advise thank you

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [March 4, 2020, 9:10pm UTC](https://community.graylog.org/t/graylog-elasticsearch-problem/14052/3 "2020-03-04T21:10:46Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.