Cannot create Data Stream


I am trying to create Data Streams by issuing:
PUT _data_stream/test-index-pattern
but I have this error:

  "error" : {
    "root_cause" : [
        "type" : "security_exception",
        "reason" : "action [indices:admin/data_stream/create] is unauthorized for user [elastic]"
    "type" : "security_exception",
    "reason" : "action [indices:admin/data_stream/create] is unauthorized for user [elastic]",
    "caused_by" : {
      "type" : "illegal_state_exception",
      "reason" : "There are no external requests known to support wildcards that don't support replacing their indices"
  "status" : 403

How can I fix that?

Thank you in advance!


Hi @Angelos,

Based on error it looks like your user does not have a permission to write data stream. You can check the docs to better understand permissions.

You can update user permission in Stack Management -> Security -> Users

Regards, Dzmitry

Hi Dzmitry,

Thank you for your response.

As you can see from the error I am using the default elastic user which is superuser.


Hi how did you set up your super user - elastic? What is the version of your stack?


The authorization error you're seeing is likely a red herring, and not the actual cause of your problem:

Can you provide the command you used to create the test-index-pattern index template?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.