Skip to main content

Audit logs are not populating in A11.3 control room

  • December 28, 2022
  • 3 replies
  • 155 views

rbkadiyam
Forum|alt.badge.img+16

Issue :: Audit logs are not populating in A11.3 control room

Error: “Failed to save to index: org.elasticsearch.ElasticsearchStatusException: Elasticsearch exception [type=cluster_block_exception, reason=blocked by: [FORBIDDEN/12/index read-only / allow delete (api)]”.

Resolution :

  • Stop elastic service 
  • Rename data folder to data_bkp (C:\ProgramData\AutomationAnywhere\elasticsearch)
  • Restart the service
  • if you have more than one node do above steps for all nodes 

3 replies

Raul Jaimes
Forum|alt.badge.img+9
  • Navigator | Tier 3
  • 494 replies
  • December 28, 2022

Hi @rbkadiyam ,

This is only applicable if you have performed a fresh install.  The steps you should follow are described in the KB

https://apeople.automationanywhere.com/s/article/Failed-to-save-to-index-Error-in-saving-Audit-logs-due-to-low-disk-space-in-C-Drive

Basically you need to delete huge audit logs in the elasticsearch using curl.

 

Regards


rbkadiyam
Forum|alt.badge.img+16
  • Author
  • Navigator | Tier 3
  • 578 replies
  • December 28, 2022

@Raul Jaimes No, this is not for fresh install… I see the space in server as well as disk available for more than 50% and still having issue… after renaming the folder only it worked.


Raul Jaimes
Forum|alt.badge.img+9
  • Navigator | Tier 3
  • 494 replies
  • December 28, 2022

@rbkadiyam ,

Yep, sure deleting the folder will work. But you will lost indexed elasticsearch information. The recommendation is perform the described steps in the KB

Regards.


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings