# elasticsearch/client.go:408 Cannot index event publisher.Event
**URL:** https://discuss.elastic.co/t/elasticsearch-client-go-408-cannot-index-event-publisher-event/333809
**Category:** Beats
**Tags:** elastic-stack-monitoring, docker, filebeat
**Created:** [May 18, 2023, 8:50pm UTC](https://discuss.elastic.co/t/elasticsearch-client-go-408-cannot-index-event-publisher-event/333809 "2023-05-18T20:50:17Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@reddyk001](https://discuss.elastic.co/u/reddyk001)
#### Post date: [May 18, 2023, 8:50pm UTC](https://discuss.elastic.co/t/elasticsearch-client-go-408-cannot-index-event-publisher-event/333809/1 "2023-05-18T20:50:17Z")
Hello All,
i was trying to send k8s container logs to Elasticsearch through filebeat. we are getting more logs that expected and also it is trigger the below warning continuously from filebeat side and it trying write in old indices . can some one suggest on this. Thank you in advance.
\*\*2023-05-18T12:29:12.620Z WARN [elasticsearch] elasticsearch/client.go:408 Cannot index event publisher.Event{Content:beat.Event{Timestamp:time.Time{wall:0x2d69e370, ext:63819632370, loc:(\*time.Location)(nil)}, Meta:null, Fields:{"agent":{"ephemeral\_id":"aab60380-cd1b-4e0f-99cc-72582a6fca1f","hostname":"filebeat-dr-ds-qckxz","id":"cafca62d-ba9d-44b9-b1fa-d0897337e9b6","name":"aks-proddefpool-26950791-vmss00000m","type":"filebeat","version":"7.10.1"},"app\_environment":"aks","cluster":"cricketonline-eastus2-prod-app-aks","container":{"id":"ef1fe7c50970bdd4856cadabb6e2bc71a8aef871e95acaa1703d85e0fcada80d","image":{"name":"[docker.io/spvest/azure-keyvault-controller:1.2.3"},"runtime":"containerd"},"datacenter":"eastus2","ecs":{"version":"1.6.0"},"environment":"prod","instance":"domain","kubernetes":{"container":{"image":"docker.io/spvest/azure-keyvault-controller:1.2.3","name":"controller"},"labels":{"app\_kubernetes\_io/component":"azure-key-vault-to-k8s-akv2k8s-controller","app\_kubernetes\_io/instance":"azure-key-vault-to-k8s","app\_kubernetes\_io/name":"akv2k8s","pod-template-hash":"657c4bb7fc"},"namespace":"extensions","node":{"name":"aks-proddefpool-26950791-vmss00000m"},"pod":{"name":"azure-key-vault-to-k8s-akv2k8s-controller-657c4bb7fc-fbxt2","uid":"fda3588f-4926-427b-9db2-f766bfd2daa2"},"replicaset":{"name":"azure-key-vault-to-k8s-akv2k8s-controller-657c4bb7fc"}},"log":{"file":{"path":"/var/log/containers/azure-key-vault-to-k8s-akv2k8s-controller-657c4bb7fc-fbxt2\_extensions\_controller-ef1fe7c50970bdd4856cadabb6e2bc71a8aef871e95acaa1703d85e0fcada80d.log"},"offset":26322670},"message":"E0514](http://docker.io/spvest/azure-keyvault-controller:1.2.3%22%7D,%22runtime%22:%22containerd%22%7D,%22datacenter%22:%22eastus2%22,%22ecs%22:%7B%22version%22:%221.6.0%22%7D,%22environment%22:%22prod%22,%22instance%22:%22domain%22,%22kubernetes%22:%7B%22container%22:%7B%22image%22:%22docker.io/spvest/azure-keyvault-controller:1.2.3%22,%22name%22:%22controller%22%7D,%22labels%22:%7B%22app_kubernetes_io/component%22:%22azure-key-vault-to-k8s-akv2k8s-controller%22,%22app_kubernetes_io/instance%22:%22azure-key-vault-to-k8s%22,%22app_kubernetes_io/name%22:%22akv2k8s%22,%22pod-template-hash%22:%22657c4bb7fc%22%7D,%22namespace%22:%22extensions%22,%22node%22:%7B%22name%22:%22aks-proddefpool-26950791-vmss00000m%22%7D,%22pod%22:%7B%22name%22:%22azure-key-vault-to-k8s-akv2k8s-controller-657c4bb7fc-fbxt2%22,%22uid%22:%22fda3588f-4926-427b-9db2-f766bfd2daa2%22%7D,%22replicaset%22:%7B%22name%22:%22azure-key-vault-to-k8s-akv2k8s-controller-657c4bb7fc%22%7D%7D,%22log%22:%7B%22file%22:%7B%22path%22:%22/var/log/containers/azure-key-vault-to-k8s-akv2k8s-controller-657c4bb7fc-fbxt2_extensions_controller-ef1fe7c50970bdd4856cadabb6e2bc71a8aef871e95acaa1703d85e0fcada80d.log%22%7D,%22offset%22:26322670%7D,%22message%22:%22E0514) 03:39:30.761851 1 worker.go:92] Failed to process key cwdigital-prod/sb-send-kount-cred-sync. Reason: Failed to get secret for 'sb-send-kount-cred-sync' from Azure Key Vault 'prod-eastus2-kv-25366'","tags":["Microservice\_Log"]}, Private:file.State{Id:"native::7249479-2049", PrevId:"", Finished:false, Fileinfo:(_os.fileStat)(0xc000432270), Source:"/var/log/containers/azure-key-vault-to-k8s-akv2k8s-controller-657c4bb7fc-fbxt2\_extensions\_controller-ef1fe7c50970bdd4856cadabb6e2bc71a8aef871e95acaa1703d85e0fcada80d.log", Offset:26322920, Timestamp:time.Time{wall:0xc111a2ea2f84e407, ext:169250334, loc:(time.Location)(0x64d0ce0)}, TTL:-1, Type:"container", Meta:map[string]string(nil), FileStateOS:file.StateOS{Inode:0x6e9e47, Device:0x801}, IdentifierName:"native"}, TimeSeries:false}, Flags:0x1, Cache:publisher.EventCache{m:common.MapStr(nil)}} (status=403): {"type":"cluster\_block\_exception","reason":"index [indexname] blocked by: [FORBIDDEN/8/index write (api)];"}_
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 15, 2023, 10:51pm UTC](https://discuss.elastic.co/t/elasticsearch-client-go-408-cannot-index-event-publisher-event/333809/2 "2023-06-15T22:51:08Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.