# Accidentally deleted all indices from the cluster. How do I restore the data? **URL:** \ **Category:** Elasticsearch\ **Created:** [September 17, 2018, 9:51am UTC](https://discuss.elastic.co/t/accidentally-deleted-all-indices-from-the-cluster-how-do-i-restore-the-data/148806 "2018-09-17T09:51:52Z")\ **Posts on this page:** 1\ **Showing post:** 7
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [September 18, 2018, 4:12am UTC](https://discuss.elastic.co/t/accidentally-deleted-all-indices-from-the-cluster-how-do-i-restore-the-data/148806/7 "2018-09-18T04:12:32Z")
> [@rshetty](#): > > I had to disable all the xpack settings and ssl settings as monitoring, watcher, etc seem to be using the elastic credential. This is not correct. I don't know what issue you ran into, but internal services do not use the `elastic` user. > [2018-09-17T12:30:10,755][INFO][o.e.x.s.a.AuthenticationService] Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic] This is not an _error_. It is an informational message that the incorrect password was provided for te `elastic` user, but it does not prevent the service from starting. --- _[View the full topic](https://discuss.elastic.co/t/accidentally-deleted-all-indices-from-the-cluster-how-do-i-restore-the-data/148806)._