Hi Steve, Graylog blocks writes to rotated indices to prevent accidental modifications.
You can remove the write block by setting index.blocks.write to false, see https://www.elastic.co/guide/en/elasticsearch/reference/1.7/indices-update-settings.html for details. Cheers, Jochen On Monday, 21 March 2016 15:52:56 UTC+1, Steve Miller wrote: > > Hello > > Thank you very much! I have now my query but when i try to delete > something, then i have this error. > > "error" : "ClusterBlockException[blocked by: [FORBIDDEN/8/index write > (api)];]", > "status" : 403 > > The query with "-x get" works, but "x- delete" with the error. > > cheers > Steve > > > Am Montag, 14. März 2016 10:00:42 UTC+1 schrieb Steve Miller: >> >> Hello >> >> Is it possible to delete all message from Graylog/Elasticsearch with >> syslog level 7? Purhaps with a cron job. >> We have many debug messages in our Graylog, and so i'm looking for a way >> how can remove all this debug messages. >> >> regards >> Steve >> > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/1b73cadf-301b-4fab-9219-8ca98f77df94%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
