Audit logs are not populating in A11.3 control room

  • 28 December 2022
  • 3 replies
  • 45 views

Userlevel 5
Badge +10

Issue :: Audit logs are not populating in A11.3 control room

Error: “Failed to save to index: org.elasticsearch.ElasticsearchStatusException: Elasticsearch exception [type=cluster_block_exception, reason=blocked by: [FORBIDDEN/12/index read-only / allow delete (api)]”.

Resolution :

  • Stop elastic service 
  • Rename data folder to data_bkp (C:\ProgramData\AutomationAnywhere\elasticsearch)
  • Restart the service
  • if you have more than one node do above steps for all nodes 

3 replies

Userlevel 5
Badge +9

Hi @rbkadiyam ,

This is only applicable if you have performed a fresh install.  The steps you should follow are described in the KB

https://apeople.automationanywhere.com/s/article/Failed-to-save-to-index-Error-in-saving-Audit-logs-due-to-low-disk-space-in-C-Drive

Basically you need to delete huge audit logs in the elasticsearch using curl.

 

Regards

Userlevel 5
Badge +10

@Raul Jaimes No, this is not for fresh install… I see the space in server as well as disk available for more than 50% and still having issue… after renaming the folder only it worked.

Userlevel 5
Badge +9

@rbkadiyam ,

Yep, sure deleting the folder will work. But you will lost indexed elasticsearch information. The recommendation is perform the described steps in the KB

Regards.

Reply