# Elasticsearch auto delete my data **URL:** \ **Category:** Elasticsearch\ **Created:** [November 29, 2020, 9:25am UTC](https://discuss.elastic.co/t/elasticsearch-auto-delete-my-data/256980 "2020-11-29T09:25:55Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Quang\_Quy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/quang_quy/32/79863_2.png) [@Quang\_Quy](https://discuss.elastic.co/u/Quang_Quy)\ **Post date:** [November 29, 2020, 9:25am UTC](https://discuss.elastic.co/t/elasticsearch-auto-delete-my-data/256980/1 "2020-11-29T09:25:55Z")
Hi everyone! I'm having a problem that after a while, the elastic automatically deletes all the data even though I didn't configure anything to automatically delete, this is the log. Is there a way to disable the elastic auto-delete function? ```auto [2020-11-28T08:30:00,091][INFO][o.e.x.s.SnapshotRetentionTask] [PL.local] starting SLM retention snapshot cleanup task [2020-11-28T08:30:00,091][INFO][o.e.x.s.SnapshotRetentionTask] [PL.local] there are no repositories to fetch, SLM retention snapshot cleanup task complete [2020-11-28T21:38:59,347][INFO][o.e.c.m.MetadataDeleteIndexService] [PL.local] [.apm-agent-configuration/PLThIEHAQnWvYzkwWJoCJg] deleting index [2020-11-28T21:39:00,047][INFO][o.e.c.m.MetadataDeleteIndexService] [PL.local] [.apm-custom-link/bsNcZur0Tpmg6NXz2Y6r9A] deleting index [2020-11-28T21:39:01,020][INFO][o.e.c.m.MetadataDeleteIndexService] [PL.local] [customers/GRKqtbtrQU--LrKVgDOj8w] deleting index [2020-11-28T21:39:01,958][INFO][o.e.c.m.MetadataDeleteIndexService] [PL.local] [orders/Ocrp9cFcTGypx4TMjblQSA] deleting index [2020-11-28T21:39:02,917][INFO][o.e.c.m.MetadataDeleteIndexService] [PL.local] [products/RwT_i07hSzyM-39xVlk-Rg] deleting index [2020-11-28T21:39:03,998][INFO][o.e.c.m.MetadataDeleteIndexService] [PL.local] [providers/_dFezzhVTLOtdreERYKztA] deleting index [2020-11-28T21:39:04,988][INFO][o.e.c.m.MetadataDeleteIndexService] [PL.local] [read_me/rgCeHzSHSi6hajs0Y-tmfQ] deleting index [2020-11-28T21:39:06,246][INFO][o.e.c.m.MetadataCreateIndexService] [PL.local] [read_me] creating index, cause [api], templates [], shards [1]/[1] [2020-11-28T21:39:07,343][INFO][o.e.c.m.MetadataMappingService] [PL.local] [read_me/OcYRZMHFROiAbP3FlYEwsw] create_mapping [_doc] [2020-11-28T22:41:56,266][INFO][o.e.c.m.MetadataDeleteIndexService] [PL.local] [read_me/OcYRZMHFROiAbP3FlYEwsw] deleting index [2020-11-28T22:41:56,917][INFO][o.e.c.m.MetadataCreateIndexService] [PL.local] [read_me] creating index, cause [api], templates [], shards [1]/[1] [2020-11-28T22:41:58,156][INFO][o.e.c.m.MetadataMappingService] [PL.local] [read_me/h_mbxNt1TG2pQ3VIb2B5oA] create_mapping [_doc] ``` ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [November 29, 2020, 9:59am UTC](https://discuss.elastic.co/t/elasticsearch-auto-delete-my-data/256980/2 "2020-11-29T09:59:16Z")
Please don't post images of text as they are hard to read, may not display correctly for everyone, and are not searchable. Instead, paste the text and format it with `` icon or pairs of triple backticks (```), and check the preview window to make sure it's properly formatted before posting it. This makes it more likely that your question will receive a useful answer. It would be great if you could update your post to solve this. I don't see any index removed by elastic here. What has been deleted? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [November 29, 2020, 10:13am UTC](https://discuss.elastic.co/t/elasticsearch-auto-delete-my-data/256980/3 "2020-11-29T10:13:34Z")
Elasticsearch does not automatically delete any data (possibly with the exception of some internal system and monitoring data). As your cluster does not appear to be secured it might be [open to external attacks](https://discuss.elastic.co/t/some-indexes-have-been-deleted-now-i-see-indexes-called-meow/242731) if it is exposed to the internet. ---
**Author:** ![Quang\_Quy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/quang_quy/32/79863_2.png) [@Quang\_Quy](https://discuss.elastic.co/u/Quang_Quy)\ **Post date:** [November 29, 2020, 10:27am UTC](https://discuss.elastic.co/t/elasticsearch-auto-delete-my-data/256980/4 "2020-11-29T10:27:04Z")
thanks ! I will edit my post. ---
**Author:** ![Quang\_Quy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/quang_quy/32/79863_2.png) [@Quang\_Quy](https://discuss.elastic.co/u/Quang_Quy)\ **Post date:** [November 29, 2020, 10:27am UTC](https://discuss.elastic.co/t/elasticsearch-auto-delete-my-data/256980/5 "2020-11-29T10:27:51Z")
thanks ! I will check again for the security of the system. ---
**Author:** ![droberts195](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/droberts195/32/17692_2.png) [@droberts195](https://discuss.elastic.co/u/droberts195)\ **Post date:** [November 29, 2020, 12:07pm UTC](https://discuss.elastic.co/t/elasticsearch-auto-delete-my-data/256980/6 "2020-11-29T12:07:30Z")
When you say “deletes all the data” do you literally mean _all_ your data, or just ML job results? If it’s just ML job results you’re complaining about then there are some configurations you need to change. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [November 30, 2020, 4:39am UTC](https://discuss.elastic.co/t/elasticsearch-auto-delete-my-data/256980/7 "2020-11-30T04:39:52Z")
> [@Quang\_Quy](#): > > ```auto > [2020-11-28T22:41:56,917][INFO][o.e.c.m.MetadataCreateIndexService] [PL.local] [read_me] creating index, cause [api], templates [], shards [1]/[1] > > ``` To me that indicates that you have your cluster open to the internet and not secured. Someone has then found this unsecured cluster and is deleting your data. Take a look at the indicated `read_me` index. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 28, 2020, 4:40am UTC](https://discuss.elastic.co/t/elasticsearch-auto-delete-my-data/256980/8 "2020-12-28T04:40:10Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.