# Can't create index patterns after x-pack licence expiration

**URL:** <https://discuss.elastic.co/t/cant-create-index-patterns-after-x-pack-licence-expiration/122535>\
**Category:** Elasticsearch\
**Created:** [March 5, 2018, 2:39pm UTC](https://discuss.elastic.co/t/cant-create-index-patterns-after-x-pack-licence-expiration/122535 "2018-03-05T14:39:28Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![matiasf](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matiasf/32/27086_2.png) [@matiasf](https://discuss.elastic.co/u/matiasf)\
**Post date:** [March 5, 2018, 2:39pm UTC](https://discuss.elastic.co/t/cant-create-index-patterns-after-x-pack-licence-expiration/122535/1 "2018-03-05T14:39:28Z")

</div>

Hi,

We have been trying x-pack and the license have expired yesterday. Now can't create index-patterns and said the index y read only (I can delete by curl against elastic).

I try uninstalling the X-pack but the problem persist. Any idea about this issue?

Thanks,  
Matías.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 5, 2018, 3:09pm UTC](https://discuss.elastic.co/t/cant-create-index-patterns-after-x-pack-licence-expiration/122535/2 "2018-03-05T15:09:06Z")

</div>

Did you uninstall x-pack and restart all nodes?

---

<div class="post-metadata">

**Author:** ![matiasf](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matiasf/32/27086_2.png) [@matiasf](https://discuss.elastic.co/u/matiasf)\
**Post date:** [March 5, 2018, 3:56pm UTC](https://discuss.elastic.co/t/cant-create-index-patterns-after-x-pack-licence-expiration/122535/3 "2018-03-05T15:56:54Z")

</div>

Hello @dadoonet,

Yes, I did it a couple of times. Now I also detect I can't create visualizations, it gives me this error.

Error: blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];: [cluster\_block\_exception] blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];

---

<div class="post-metadata">

**Author:** ![matiasf](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matiasf/32/27086_2.png) [@matiasf](https://discuss.elastic.co/u/matiasf)\
**Post date:** [March 5, 2018, 3:57pm UTC](https://discuss.elastic.co/t/cant-create-index-patterns-after-x-pack-licence-expiration/122535/4 "2018-03-05T15:57:53Z")

</div>

I check again if x-pack is uninstall and it is.

$ sudo bin/elasticsearch-plugin remove x-pack  
-\> removing [x-pack]...  
ERROR: plugin [x-pack] not found; run 'elasticsearch-plugin list' to get list of installed plugins  
$ cd ../kibana/  
$ sudo bin/kibana-plugin remove x-pack  
Unable to remove plugin because of error: "Plugin [x-pack] is not installed"

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 5, 2018, 4:32pm UTC](https://discuss.elastic.co/t/cant-create-index-patterns-after-x-pack-licence-expiration/122535/5 "2018-03-05T16:32:54Z")

</div>

Can you run this? [https://www.elastic.co/guide/en/elasticsearch/reference/6.2/cluster-allocation-explain.html](https://www.elastic.co/guide/en/elasticsearch/reference/6.2/cluster-allocation-explain.html)

---

<div class="post-metadata">

**Author:** ![matiasf](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matiasf/32/27086_2.png) [@matiasf](https://discuss.elastic.co/u/matiasf)\
**Post date:** [March 5, 2018, 5:14pm UTC](https://discuss.elastic.co/t/cant-create-index-patterns-after-x-pack-licence-expiration/122535/6 "2018-03-05T17:14:43Z")

</div>

```
 GET /_cluster/allocation/explain
 {
   "index": "sen_coso_index",
   "shard": 0,
   "primary": true
 }

```

And response:

```
 {
   "index": "sen_coso_index",
   "shard": 0,
   "primary": true,
   "current_state": "started",
   "current_node": {
     "id": "OwxshKdNRJK1WPI8Eyc6_Q",
     "name": "OwxshKd",
     "transport_address": "192.168.98.155:9300",
     "weight_ranking": 1
   },
   "can_remain_on_current_node": "yes",
   "can_rebalance_cluster": "no",
   "can_rebalance_cluster_decisions": [
     {
       "decider": "rebalance_only_when_active",
       "decision": "NO",
       "explanation": "rebalancing is not allowed until all replicas in the cluster are active"
     },
     {
       "decider": "cluster_rebalance",
       "decision": "NO",
       "explanation": "the cluster has unassigned shards and cluster setting [cluster.routing.allocation.allow_rebalance] is set to [indices_all_active]"
     }
   ],
   "can_rebalance_to_other_node": "no",
   "rebalance_explanation": "rebalancing is not allowed"
 }
```

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 6, 2018, 1:45am UTC](https://discuss.elastic.co/t/cant-create-index-patterns-after-x-pack-licence-expiration/122535/7 "2018-03-06T01:45:06Z")

</div>

Please use the `</>` icon to format your code or markdown style but not the citation icon.

What gives:

```auto
GET _cat/indices?v
GET _cat/shards?v

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 3, 2018, 1:45am UTC](https://discuss.elastic.co/t/cant-create-index-patterns-after-x-pack-licence-expiration/122535/8 "2018-04-03T01:45:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.