logstash向es同步数据报错：retrying failed action with response code: 403 ({“type“=＞“cluster_block_exce

1、问题

使用logstash向es同步数据报错：

[logstash.outputs.elasticsearch] retrying failed action with response code: 403 ({"type"=>"cluster_block_exception", "reason"=>"blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];"})

2、原因

服务器磁盘空间满了导致es索引为只读状态。

3、解决方案

1、清理磁盘，空出更大磁盘空间或直接扩充磁盘空间。

2、然后执行如下命令：

curl -XPUT -H 'Content-Type: application/json' http://127.0.0.1:9200/_all/_settings -d '{"index.blocks.read_only_allow_delete": null}'