# Elastic Search index getting automatically deleted

**URL:** <https://discuss.elastic.co/t/elastic-search-index-getting-automatically-deleted/136384>\
**Category:** Elasticsearch\
**Created:** [June 18, 2018, 10:16pm UTC](https://discuss.elastic.co/t/elastic-search-index-getting-automatically-deleted/136384 "2018-06-18T22:16:09Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Arkapravo\_Das](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arkapravo_das/32/78953_2.png) [@Arkapravo\_Das](https://discuss.elastic.co/u/Arkapravo_Das)\
**Post date:** [June 18, 2018, 10:16pm UTC](https://discuss.elastic.co/t/elastic-search-index-getting-automatically-deleted/136384/1 "2018-06-18T22:16:09Z")

</div>

Hi All,  
I am a newbie into this..working in a clustered environment where two nodes are configured as

cluster.name:   
node.master: true  
node.data: true  
discovery.zen.ping.multicast.enabled: false  
discovery.zen.ping.unicast.hosts: \<1st node\>  
\*\* config is same for both the servers.

Scenario: One index got created [which we have seen in elastic search head] and then after few minutes it got deleted automatically.There is no deletion job configured though.

Can you please advice me what can be the possible scenarios?Server version is 0.x

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 18, 2018, 10:25pm UTC](https://discuss.elastic.co/t/elastic-search-index-getting-automatically-deleted/136384/2 "2018-06-18T22:25:44Z")

</div>

> [@Arkapravo\_Das](#):
>
> I am a newbie into this

Welcome! 🙂

> [@Arkapravo\_Das](#):
>
> two nodes

That's not ideal, check out [Important Configuration Changes | Elasticsearch: The Definitive Guide [2.x] | Elastic](https://www.elastic.co/guide/en/elasticsearch/guide/2.x/important-configuration-changes.html#_minimum_master_nodes) for more.

> [@Arkapravo\_Das](#):
>
> Server version is 0.x

Do you mean the Elasticsearch version? Can you show the output of `curl HOST:9200`?

---

<div class="post-metadata">

**Author:** ![Arkapravo\_Das](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arkapravo_das/32/78953_2.png) [@Arkapravo\_Das](https://discuss.elastic.co/u/Arkapravo_Das)\
**Post date:** [June 19, 2018, 2:31am UTC](https://discuss.elastic.co/t/elastic-search-index-getting-automatically-deleted/136384/3 "2018-06-19T02:31:08Z")

</div>

While describing the config: I dint mention the cluster name.Actually it is not blank, for both the servers it is same.

I Used elastic search head to get the output instead of curl.

[http://HOST1:9200/](http://HOST1:9200/)  
{  
"ok": true,  
"status": 200,  
"name": "ES\_SERVER1”,  
"version": {  
"number": "0.20.1",  
"snapshot\_build": false  
},  
"tagline": "You Know, for Search"  
}

[http://HOST2:9200/](http://HOST2:9200/)  
{  
"ok": true,  
"status": 200,  
"name": "ES\_SERVER2”,  
"version": {  
"number": "0.20.1",  
"snapshot\_build": false  
},  
"tagline": "You Know, for Search"  
}

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 19, 2018, 5:54am UTC](https://discuss.elastic.co/t/elastic-search-index-getting-automatically-deleted/136384/4 "2018-06-19T05:54:06Z")

</div>

> [@Arkapravo\_Das](#):
>
> "number": "0.20.1",

Is there any reason you are using such an old version? Can you upgrade?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [June 19, 2018, 6:08am UTC](https://discuss.elastic.co/t/elastic-search-index-getting-automatically-deleted/136384/5 "2018-06-19T06:08:02Z")

</div>

> [@Arkapravo\_Das](#):
>
> Scenario: One index got created [which we have seen in Elasticsearch head] and then after few minutes it got deleted automatically.There is no deletion job configured though.

Something or someone is doing that most likely unless you see something weird in your logs.  
May be you have your cluster exposed without any protection on internet or in your company and someone is removing indices? May be you have something wrong in your code? May be you are using the default cluster name and someone in your company just started another node locally which joins accidentally the cluster and he ran `DELETE /`?

Lot of options there. In all cases, as @warkolm said, you really need to install a new version.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 17, 2018, 6:08am UTC](https://discuss.elastic.co/t/elastic-search-index-getting-automatically-deleted/136384/6 "2018-07-17T06:08:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.