Elasticsearch indexing failed Elasticsearch error: blocked by: [FORBIDDEN/12/index read-only / allow delete (api)]

Alfa1

Well-known member
#1
I am getting a lot of these errors:

XenForo_Exception: Elasticsearch indexing failed Elasticsearch error: blocked by: [FORBIDDEN/12/index read-only / allow delete (api)]; - library/XenES/Search/SourceHandler/ElasticSearch.php:1062
Generated By: Alfa, 36 minutes ago

Stack Trace
#0 /library/XenES/Search/SourceHandler/ElasticSearch.php(1185): XenES_Search_SourceHandler_ElasticSearch->_logSearchResponseError(Object(stdClass), false, 'Elasticsearch i...')
#1 /library/XenES/Search/SourceHandler/ElasticSearch.php(117): XenES_Search_SourceHandler_ElasticSearch->_triggerFailedIndexError(Object(stdClass), Array, true)
#2 /library/XenForo/Search/Indexer.php(105): XenES_Search_SourceHandler_ElasticSearch->deleteFromIndex('post', Array)
#3 /library/XenForo/Search/DataHandler/Post.php(99): XenForo_Search_Indexer->deleteFromIndex('post', Array)
#4 /library/XenForo/Search/DataHandler/Abstract.php(316): XenForo_Search_DataHandler_Post->_deleteFromIndex(Object(XenForo_Search_Indexer), Array)
#5 /library/XenForo/DataWriter/Discussion.php(731): XenForo_Search_DataHandler_Abstract->deleteFromIndex(Object(XenForo_Search_Indexer), Array)
#6 /library/XenForo/DataWriter/Discussion.php(790): XenForo_DataWriter_Discussion->_deleteFromSearchIndex()
#7 /library/XenForo/DataWriter.php(1793): XenForo_DataWriter_Discussion->_postDelete()
#8 /library/XenForo/Model/InlineMod/Thread.php(219): XenForo_DataWriter->delete()
#9 /library/SV/ReportImprovements/XenForo/Model/InlineMod/Thread.php(10): XenForo_Model_InlineMod_Thread->deleteThreads(Array, Array, NULL, NULL)
#10 /library/XenForo/ControllerPublic/InlineMod/Thread.php(45): SV_ReportImprovements_XenForo_Model_InlineMod_Thread->deleteThreads(Array, Array, NULL)
#11 /library/Siropu/AdsManager/ControllerPublic/InlineModThread.php(49): XenForo_ControllerPublic_InlineMod_Thread->actionDelete()
#12 /library/SV/ReportImprovements/XenForo/ControllerPublic/InlineMod/Thread.php(10): Siropu_AdsManager_ControllerPublic_InlineModThread->actionDelete()
#13 /library/XenForo/FrontController.php(369): SV_ReportImprovements_XenForo_ControllerPublic_InlineMod_Thread->actionDelete()
#14 /library/XenForo/FrontController.php(152): XenForo_FrontController->dispatch(Object(XenForo_RouteMatch))
#15 /index.php(13): XenForo_FrontController->run()
#16 {main}
Request State
array(3) {
["url"] => string(48) "https://forum.com/inline-mod/thread/delete"
["_GET"] => array(0) {
}
["_POST"] => array(7) {
["hard_delete"] => string(1) "1"
["resolve_linked_report"] => string(1) "1"
["save"] => string(14) "Delete Threads"
["threads"] => array(1) {
[0] => string(6) "344854"
}
["_xfConfirm"] => string(1) "1"
["redirect"] => string(45) "https://forum.com/find-new/875227/posts"
["_xfToken"] => string(8) "********"
}
}


What puzzles me is the mention of API.
The above likely has to do with the employing of a Web Application Firewall. (StackPath)
I assume that I need to whitelist something. Does anyone have an idea whats going on?
 

Alfa1

Well-known member
#3
several things changed:
  1. we had a major DDoS
  2. server IP changed
  3. Web Application Firewall (StackPath) added. (but seems to occur when going around the WAF directly to the origin server)
 
Top