Skip to main content

Issue :: Audit logs are not populating in A11.3 control room

Error: “Failed to save to index: org.elasticsearch.ElasticsearchStatusException: Elasticsearch exception otype=cluster_block_exception, reason=blocked by: yFORBIDDEN/12/index read-only / allow delete (api)]”.

Resolution :

  • Stop elastic service 
  • Rename data folder to data_bkp (C:\ProgramData\AutomationAnywhere\elasticsearch)
  • Restart the service
  • if you have more than one node do above steps for all nodes 

Hi @rbkadiyam ,

This is only applicable if you have performed a fresh install.  The steps you should follow are described in the KB

https://apeople.automationanywhere.com/s/article/Failed-to-save-to-index-Error-in-saving-Audit-logs-due-to-low-disk-space-in-C-Drive

Basically you need to delete huge audit logs in the elasticsearch using curl.

 

Regards


@Raul Jaimes No, this is not for fresh install… I see the space in server as well as disk available for more than 50% and still having issue… after renaming the folder only it worked.


@rbkadiyam ,

Yep, sure deleting the folder will work. But you will lost indexed elasticsearch information. The recommendation is perform the described steps in the KB

Regards.


Reply