# Error after creating Detection rules in Elastic Security; Not getting alerts
**URL:** https://discuss.elastic.co/t/error-after-creating-detection-rules-in-elastic-security-not-getting-alerts/385908
**Category:** SIEM
**Created:** [April 15, 2026, 10:23pm UTC](https://discuss.elastic.co/t/error-after-creating-detection-rules-in-elastic-security-not-getting-alerts/385908 "2026-04-15T22:23:15Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@wicklanm](https://discuss.elastic.co/u/wicklanm)
#### Post date: [April 15, 2026, 10:23pm UTC](https://discuss.elastic.co/t/error-after-creating-detection-rules-in-elastic-security-not-getting-alerts/385908/1 "2026-04-15T22:23:15Z")
Hey everyone,
After I added Security Detection Rules in my Elastic Search, I get the following error below. what does this mean and what can I do to fix it? I am not getting any alerts from this. This is for my Windows Server virtual machine hosted on VULTR, where I have Elastic search installed on a separate server, and they are connected. There is an active Elastic Agent for the Windows Server. I have tried restarting the Windows Server machine, but I am still getting this error. Any ideas?
Error: Forbidden
at Fetch.fetchResponse
#detection-rules
---
### Author:  [@RylandHerrick](https://discuss.elastic.co/u/RylandHerrick)
#### Post date: [April 16, 2026, 2:53am UTC](https://discuss.elastic.co/t/error-after-creating-detection-rules-in-elastic-security-not-getting-alerts/385908/2 "2026-04-16T02:53:18Z")
Hi @wicklanm , it looks like you're experiencing [this bug](https://github.com/elastic/kibana/issues/246011) present in 9.3.0. As stated in the issue, it should be fixed in 9.3.4 and 9.4.0. Let me know if you have further questions!
---
### Author:  [@wicklanm](https://discuss.elastic.co/u/wicklanm)
#### Post date: [April 16, 2026, 4:07am UTC](https://discuss.elastic.co/t/error-after-creating-detection-rules-in-elastic-security-not-getting-alerts/385908/3 "2026-04-16T04:07:33Z")
Hey everyone,
After I added Security Detection Rules in my Elastic Search, I get the following error below. what does this mean and what can I do to fix it? I am not getting any alerts from this. This is for my Windows Server virtual machine hosted on VULTR, where I have Elastic search installed on a separate server, and they are connected. There is an active Elastic Agent for the Windows Server. I have tried restarting the Windows Server machine, but I am still getting this error. Any ideas?
Error: Forbidden
at Fetch.fetchResponse
#detection-rules Ok Thank You! Would this be a rolling update stack that I would have to follow? This is a self-managed cluster installed on a Linux virtual server.
> **[Upgrade the Elastic Stack on a self-managed cluster | Elastic Docs](https://www.elastic.co/docs/deploy-manage/upgrade/deployment-or-cluster/self-managed)**
>
> If you've installed the Elastic Stack on your own self-managed infrastructure, once you're prepared to upgrade, you'll need to upgrade each of your Elastic...
---
### Author:  [@RylandHerrick](https://discuss.elastic.co/u/RylandHerrick)
#### Post date: [April 16, 2026, 7:05pm UTC](https://discuss.elastic.co/t/error-after-creating-detection-rules-in-elastic-security-not-getting-alerts/385908/4 "2026-04-16T19:05:02Z")
@wicklanm those docs you shared should allow you to upgrade your stack once the bugfix is released, yes. I assume you're on 9.3.x; I'm not currently aware of any specific upgrade callouts from 9.3.x to e.g. 9.4.0, but please check release notes when those versions are available for any such information.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 14, 2026, 7:05pm UTC](https://discuss.elastic.co/t/error-after-creating-detection-rules-in-elastic-security-not-getting-alerts/385908/5 "2026-05-14T19:05:57Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.