# Dashboard setup fails: Unable to bulk\_create index-pattern

**URL:** <https://discuss.elastic.co/t/dashboard-setup-fails-unable-to-bulk-create-index-pattern/287524>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [October 25, 2021, 3:03am UTC](https://discuss.elastic.co/t/dashboard-setup-fails-unable-to-bulk-create-index-pattern/287524 "2021-10-25T03:03:02Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![gunlomboy](https://avatars.discourse-cdn.com/v4/letter/g/c0e974/32.png) [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\
**Post date:** [October 25, 2021, 3:03am UTC](https://discuss.elastic.co/t/dashboard-setup-fails-unable-to-bulk-create-index-pattern/287524/1 "2021-10-25T03:03:02Z")

</div>

Hi

I have installed winlogbeat on a number of machines, and they are successfully shipping logs to Elasticsearch. However, when attempting to setup the dashboards either by setting the config in the winlogbeat.yml file or by running the command, I get the following error.

```auto
2021-10-25T09:51:35.273+0700 ERROR instance/beat.go:989 Exiting: Error importing Kibana dashboards: fail to import the dashboards in Kibana: Error importing directory C:\Program Files\Winlogbeat\kibana: failed to import Kibana index pattern: 1 error: error loading index pattern: returned 403 to import file: Unable to bulk_create index-pattern: <nil>. Response: {"statusCode":403,"error":"Forbidden","message":"Unable to bulk_create index-pattern"}
Exiting: Error importing Kibana dashboards: fail to import the dashboards in Kibana: Error importing directory C:\Program Files\Winlogbeat\kibana: failed to import Kibana index pattern: 1 error: error loading index pattern: returned 403 to import file: Unable to bulk_create index-pattern: <nil>. Response: {"statusCode":403,"error":"Forbidden","message":"Unable to bulk_create index-pattern"}

```

The permissions all look OK.

Any ideas? Do I need to target a specific file in the C:\Program Files\Winlogbeat\kibana folder?

Thanks in advance 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 22, 2021, 5:03am UTC](https://discuss.elastic.co/t/dashboard-setup-fails-unable-to-bulk-create-index-pattern/287524/2 "2021-11-22T05:03:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
