Audit logs are not populating in A11.3 control room

  • 28 December 2022
  • 3 replies

Userlevel 5
Badge +10

Issue :: Audit logs are not populating in A11.3 control room

Error: “Failed to save to index: org.elasticsearch.ElasticsearchStatusException: Elasticsearch exception [type=cluster_block_exception, reason=blocked by: [FORBIDDEN/12/index read-only / allow delete (api)]”.

Resolution :

  • Stop elastic service 
  • Rename data folder to data_bkp (C:\ProgramData\AutomationAnywhere\elasticsearch)
  • Restart the service
  • if you have more than one node do above steps for all nodes 

3 replies

Userlevel 5
Badge +9

Hi @rbkadiyam ,

This is only applicable if you have performed a fresh install.  The steps you should follow are described in the KB

Basically you need to delete huge audit logs in the elasticsearch using curl.



Userlevel 5
Badge +10

@Raul Jaimes No, this is not for fresh install… I see the space in server as well as disk available for more than 50% and still having issue… after renaming the folder only it worked.

Userlevel 5
Badge +9

@rbkadiyam ,

Yep, sure deleting the folder will work. But you will lost indexed elasticsearch information. The recommendation is perform the described steps in the KB