# 403 from kibana when searching closed indices **URL:** \ **Category:** Elasticsearch\ **Created:** [April 1, 2015, 1:37pm UTC](https://discuss.elastic.co/t/403-from-kibana-when-searching-closed-indices/23038 "2015-04-01T13:37:12Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Derry\_O\_Sullivan](https://avatars.discourse-cdn.com/v4/letter/d/7bcc69/32.png) [@Derry\_O\_Sullivan](https://discuss.elastic.co/u/Derry_O_Sullivan)\ **Post date:** [April 1, 2015, 1:37pm UTC](https://discuss.elastic.co/t/403-from-kibana-when-searching-closed-indices/23038/1 "2015-04-01T13:37:12Z")
Hi all, Am using the standard ELK stack and am having an issue with kibana currently. I close one of my indices (e.g. logstash-2015.03.30). When i do a search in kibana for data involving that index, i get a 403 (IndexClosedException). I would have expected Kibana/Elasticsearch to know the index is closed and not to use in in search. Is there anyway to tell kibana to ignore that index in search? Would deleting the index be an alternative? Derry -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/2f6f60d5-fbf0-4ad6-be8e-d4769e62c618%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/2f6f60d5-fbf0-4ad6-be8e-d4769e62c618%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [April 1, 2015, 9:36pm UTC](https://discuss.elastic.co/t/403-from-kibana-when-searching-closed-indices/23038/2 "2015-04-01T21:36:50Z")
This is dangerous as it can lead to you not knowing that data isn't available. If you have it closed and are considering deleting it to resolve this, then why even bother closing it in the first place, just delete it. On 2 April 2015 at 00:37, Derry O' Sullivan [derryos@gmail.com](mailto:derryos@gmail.com) wrote: > Hi all, > > Am using the standard ELK stack and am having an issue with kibana > currently. > > I close one of my indices (e.g. logstash-2015.03.30). When i do a search > in kibana for data involving that index, i get a 403 > (IndexClosedException). I would have expected Kibana/Elasticsearch to know > the index is closed and not to use in in search. > > Is there anyway to tell kibana to ignore that index in search? Would > deleting the index be an alternative? > > Derry > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/2f6f60d5-fbf0-4ad6-be8e-d4769e62c618%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/2f6f60d5-fbf0-4ad6-be8e-d4769e62c618%40googlegroups.com) > [https://groups.google.com/d/msgid/elasticsearch/2f6f60d5-fbf0-4ad6-be8e-d4769e62c618%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/2f6f60d5-fbf0-4ad6-be8e-d4769e62c618%40googlegroups.com?utm_medium=email&utm_source=footer) > . > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9xgzJmS%2B8dWSvLMZcHP0ymvgu%3DtapTqniZg-Z6Zse\_sQ%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9xgzJmS%2B8dWSvLMZcHP0ymvgu%3DtapTqniZg-Z6Zse_sQ%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Derry\_O\_Sullivan](https://avatars.discourse-cdn.com/v4/letter/d/7bcc69/32.png) [@Derry\_O\_Sullivan](https://discuss.elastic.co/u/Derry_O_Sullivan)\ **Post date:** [April 1, 2015, 10:15pm UTC](https://discuss.elastic.co/t/403-from-kibana-when-searching-closed-indices/23038/3 "2015-04-01T22:15:07Z")
Hi Mark, The reason i asked was that i closed the index due to the fact that i didn't want people to query that data temporarily (vs deleting/permanently). I thought that Kibana would have handled the closed index vs throwing a 403 exception. Without looking at the developer tools though, you don't get any errors from kibana - just blank widgets. Derry On 1 April 2015 at 22:36, Mark Walkom [markwalkom@gmail.com](mailto:markwalkom@gmail.com) wrote: > This is dangerous as it can lead to you not knowing that data isn't > available. > > If you have it closed and are considering deleting it to resolve this, > then why even bother closing it in the first place, just delete it. > > On 2 April 2015 at 00:37, Derry O' Sullivan [derryos@gmail.com](mailto:derryos@gmail.com) wrote: > > > Hi all, > > > > Am using the standard ELK stack and am having an issue with kibana > > currently. > > > > I close one of my indices (e.g. logstash-2015.03.30). When i do a search > > in kibana for data involving that index, i get a 403 > > (IndexClosedException). I would have expected Kibana/Elasticsearch to know > > the index is closed and not to use in in search. > > > > Is there anyway to tell kibana to ignore that index in search? Would > > deleting the index be an alternative? > > > > Derry > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/2f6f60d5-fbf0-4ad6-be8e-d4769e62c618%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/2f6f60d5-fbf0-4ad6-be8e-d4769e62c618%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/2f6f60d5-fbf0-4ad6-be8e-d4769e62c618%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/2f6f60d5-fbf0-4ad6-be8e-d4769e62c618%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > -- > You received this message because you are subscribed to a topic in the > Google Groups "elasticsearch" group. > To unsubscribe from this topic, visit > [https://groups.google.com/d/topic/elasticsearch/K7Xg4ZqnpZA/unsubscribe](https://groups.google.com/d/topic/elasticsearch/K7Xg4ZqnpZA/unsubscribe). > To unsubscribe from this group and all its topics, send an email to > [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9xgzJmS%2B8dWSvLMZcHP0ymvgu%3DtapTqniZg-Z6Zse\_sQ%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9xgzJmS%2B8dWSvLMZcHP0ymvgu%3DtapTqniZg-Z6Zse_sQ%40mail.gmail.com) > [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9xgzJmS%2B8dWSvLMZcHP0ymvgu%3DtapTqniZg-Z6Zse\_sQ%40mail.gmail.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9xgzJmS%2B8dWSvLMZcHP0ymvgu%3DtapTqniZg-Z6Zse_sQ%40mail.gmail.com?utm_medium=email&utm_source=footer) > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAOGQnJr%2B\_0m3P1UxfWdD8oKhZ%3DH%3DwJ-4CuJPFw-t%2BiLYb1C58g%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAOGQnJr%2B_0m3P1UxfWdD8oKhZ%3DH%3DwJ-4CuJPFw-t%2BiLYb1C58g%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [April 1, 2015, 11:31pm UTC](https://discuss.elastic.co/t/403-from-kibana-when-searching-closed-indices/23038/4 "2015-04-01T23:31:34Z")
You might want to raise an issue on Github for a feature request then as it's possible to just ignore. On 2 April 2015 at 09:15, Derry O' Sullivan [derryos@gmail.com](mailto:derryos@gmail.com) wrote: > Hi Mark, > > The reason i asked was that i closed the index due to the fact that i > didn't want people to query that data temporarily (vs > deleting/permanently). I thought that Kibana would have handled the closed > index vs throwing a 403 exception. Without looking at the developer tools > though, you don't get any errors from kibana - just blank widgets. > > Derry > > On 1 April 2015 at 22:36, Mark Walkom [markwalkom@gmail.com](mailto:markwalkom@gmail.com) wrote: > > > This is dangerous as it can lead to you not knowing that data isn't > > available. > > > > If you have it closed and are considering deleting it to resolve this, > > then why even bother closing it in the first place, just delete it. > > > > On 2 April 2015 at 00:37, Derry O' Sullivan [derryos@gmail.com](mailto:derryos@gmail.com) wrote: > > > > > Hi all, > > > > > > Am using the standard ELK stack and am having an issue with kibana > > > currently. > > > > > > I close one of my indices (e.g. logstash-2015.03.30). When i do a search > > > in kibana for data involving that index, i get a 403 > > > (IndexClosedException). I would have expected Kibana/Elasticsearch to know > > > the index is closed and not to use in in search. > > > > > > Is there anyway to tell kibana to ignore that index in search? Would > > > deleting the index be an alternative? > > > > > > Derry > > > > > > -- > > > You received this message because you are subscribed to the Google > > > Groups "elasticsearch" group. > > > To unsubscribe from this group and stop receiving emails from it, send > > > an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > > > To view this discussion on the web visit > > > [https://groups.google.com/d/msgid/elasticsearch/2f6f60d5-fbf0-4ad6-be8e-d4769e62c618%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/2f6f60d5-fbf0-4ad6-be8e-d4769e62c618%40googlegroups.com) > > > [https://groups.google.com/d/msgid/elasticsearch/2f6f60d5-fbf0-4ad6-be8e-d4769e62c618%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/2f6f60d5-fbf0-4ad6-be8e-d4769e62c618%40googlegroups.com?utm_medium=email&utm_source=footer) > > > . > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > -- > > You received this message because you are subscribed to a topic in the > > Google Groups "elasticsearch" group. > > To unsubscribe from this topic, visit > > [https://groups.google.com/d/topic/elasticsearch/K7Xg4ZqnpZA/unsubscribe](https://groups.google.com/d/topic/elasticsearch/K7Xg4ZqnpZA/unsubscribe). > > To unsubscribe from this group and all its topics, send an email to > > [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9xgzJmS%2B8dWSvLMZcHP0ymvgu%3DtapTqniZg-Z6Zse\_sQ%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9xgzJmS%2B8dWSvLMZcHP0ymvgu%3DtapTqniZg-Z6Zse_sQ%40mail.gmail.com) > > [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9xgzJmS%2B8dWSvLMZcHP0ymvgu%3DtapTqniZg-Z6Zse\_sQ%40mail.gmail.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9xgzJmS%2B8dWSvLMZcHP0ymvgu%3DtapTqniZg-Z6Zse_sQ%40mail.gmail.com?utm_medium=email&utm_source=footer) > > . > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/CAOGQnJr%2B\_0m3P1UxfWdD8oKhZ%3DH%3DwJ-4CuJPFw-t%2BiLYb1C58g%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAOGQnJr%2B_0m3P1UxfWdD8oKhZ%3DH%3DwJ-4CuJPFw-t%2BiLYb1C58g%40mail.gmail.com) > [https://groups.google.com/d/msgid/elasticsearch/CAOGQnJr%2B\_0m3P1UxfWdD8oKhZ%3DH%3DwJ-4CuJPFw-t%2BiLYb1C58g%40mail.gmail.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/CAOGQnJr%2B_0m3P1UxfWdD8oKhZ%3DH%3DwJ-4CuJPFw-t%2BiLYb1C58g%40mail.gmail.com?utm_medium=email&utm_source=footer) > . > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X\_gwoLb3tyf8tQCsN3BJGfTEgz5XXc1rOeCyUMrgBKRKA%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X_gwoLb3tyf8tQCsN3BJGfTEgz5XXc1rOeCyUMrgBKRKA%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 12:22am UTC](https://discuss.elastic.co/t/403-from-kibana-when-searching-closed-indices/23038/5 "2017-07-06T00:22:08Z")