Hi,
I’ve solved the issue thanks to this: Index rotation failure - #5 by tobiasreckhard
TL; DR: “ES put all indices into read-only mode when the system’s disk space fell below the low watermark”. So, even if Graylog has not complained about disk space, Elasticsearch did. After increasing the available space it’s now working fine again.
Regards,
Matteo