Wazuh FORBIDDEN/12/index read-only / allow delete (api)]

In case you receive following error on wazuh: FORBIDDEN/12/index read-only / allow delete (api)]

Kibana auto changes its config to read-only mode when you are running low space

  • Check your disk space (increased it if needed)
  • To remove auto-switch to read-only mode feature of kibana,
  • Go to Dev tools -> Execute below command
PUT .kibana/_settings
{
"index": {
"blocks": {
"read_only_allow_delete": "false"
}
}
}

 

 Wazuh    
 
Fully optimised SSD hosting

Optimised for WordPress & other applications