# Failed to close alert(s)

**URL:** <https://discuss.elastic.co/t/failed-to-close-alert-s/343832>\
**Category:** Elastic Security\
**Created:** [September 26, 2023, 5:33am UTC](https://discuss.elastic.co/t/failed-to-close-alert-s/343832 "2023-09-26T05:33:33Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![IsItPossible](https://avatars.discourse-cdn.com/v4/letter/i/f6c823/32.png) [@IsItPossible](https://discuss.elastic.co/u/IsItPossible)\
**Post date:** [September 26, 2023, 5:33am UTC](https://discuss.elastic.co/t/failed-to-close-alert-s/343832/1 "2023-09-26T05:33:33Z")

</div>

Hello,

Im using version 8.5.1 and since 25.09 around 12pm European time, im not able to close alerts or mark it as acknowledge. It returns an empty error message:

The upload feature doesn't work so I cannot put a screenshot here. But the message basically say:  
_Failed to close alert(s)._ and when clicking to see the full error I see: _""_

Does someone have a similar issue ? Any idea on how to fix it ?

---

<div class="post-metadata">

**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Post date:** [September 26, 2023, 11:32am UTC](https://discuss.elastic.co/t/failed-to-close-alert-s/343832/2 "2023-09-26T11:32:29Z")

</div>

Hi @IsItPossible,

Can you see any errors in the Kibana logs around that time at all?

---

<div class="post-metadata">

**Author:** ![IsItPossible](https://avatars.discourse-cdn.com/v4/letter/i/f6c823/32.png) [@IsItPossible](https://discuss.elastic.co/u/IsItPossible)\
**Post date:** [September 26, 2023, 11:54am UTC](https://discuss.elastic.co/t/failed-to-close-alert-s/343832/3 "2023-09-26T11:54:30Z")

</div>

Hi,  
I don't have the hand on the Kibana server, but I've seen a internal server error 500. After seeing the alert errors, the machine learning jobs stopped working and then 1 hour later everything went back to normal...  
Ive contacted the partner im working with in order for him to investigate the server error logs.

---

<div class="post-metadata">

**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Post date:** [September 26, 2023, 12:58pm UTC](https://discuss.elastic.co/t/failed-to-close-alert-s/343832/4 "2023-09-26T12:58:25Z")

</div>

No worries at all @IsItPossible! Let us know if you figure out the issue and if there is an error in the logs.

---

<div class="post-metadata">

**Author:** ![wsouza](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wsouza/32/92547_2.png) [@wsouza](https://discuss.elastic.co/u/wsouza)\
**Post date:** [October 13, 2023, 10:42pm UTC](https://discuss.elastic.co/t/failed-to-close-alert-s/343832/5 "2023-10-13T22:42:16Z")

</div>

The information cited makes it difficult to understand the problem. Would it be possible to send some evidence such as logs or images?

Another possibility is to check the consistency of your elasticsearch cluster to see if there are any problems in the index used to store detection alerts.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 10, 2023, 10:43pm UTC](https://discuss.elastic.co/t/failed-to-close-alert-s/343832/6 "2023-11-10T22:43:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.