# Deny ILM to create indices

**URL:** <https://discuss.elastic.co/t/deny-ilm-to-create-indices/187795>\
**Category:** Elasticsearch\
**Tags:** ilm-index-lifecycle-management\
**Created:** [June 27, 2019, 9:29am UTC](https://discuss.elastic.co/t/deny-ilm-to-create-indices/187795 "2019-06-27T09:29:38Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![skaldenmet](https://avatars.discourse-cdn.com/v4/letter/s/a8b319/32.png) [@skaldenmet](https://discuss.elastic.co/u/skaldenmet)\
**Post date:** [June 27, 2019, 9:29am UTC](https://discuss.elastic.co/t/deny-ilm-to-create-indices/187795/1 "2019-06-27T09:29:38Z")

</div>

Hi,  
I would like to deny ILM to automatically create indices and to only handle to optimize the storage between nodes. Is there a way to do this?  
Changing my elasticsearch.yml files to:

> action.auto\_create\_index: ".watches,.triggered\_watches,.watcher-history-\*"

is sadly not working.

---

<div class="post-metadata">

**Author:** ![gbrown](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gbrown/32/34482_2.png) [@gbrown](https://discuss.elastic.co/u/gbrown)\
**Post date:** [July 5, 2019, 4:39pm UTC](https://discuss.elastic.co/t/deny-ilm-to-create-indices/187795/2 "2019-07-05T16:39:48Z")

</div>

It's not possible to directly disable that specific part of ILM, but you could use the [now freely-available](https://www.elastic.co/blog/security-for-elasticsearch-is-now-free) Security features of Elasticsearch to restrict the creation of ILM policies to administrators, so that all ILM policies have to be approved before use. Only the rollover and shrink actions create new indices, so identifying which policies might create indices is fairly straightforward.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 2, 2019, 4:46pm UTC](https://discuss.elastic.co/t/deny-ilm-to-create-indices/187795/3 "2019-08-02T16:46:47Z")

</div>

Closed on August 2, 2019, 4:46pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.