# Functionbeat Cannot index event - security\_exception
**URL:** https://discuss.elastic.co/t/functionbeat-cannot-index-event-security-exception/299016
**Category:** Beats
**Tags:** functionbeat
**Created:** [March 7, 2022, 11:05pm UTC](https://discuss.elastic.co/t/functionbeat-cannot-index-event-security-exception/299016 "2022-03-07T23:05:40Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@carl0s](https://discuss.elastic.co/u/carl0s)
#### Post date: [March 7, 2022, 11:05pm UTC](https://discuss.elastic.co/t/functionbeat-cannot-index-event-security-exception/299016/1 "2022-03-07T23:05:40Z")
After upgrading to 7.17 none of my logs are being processed, lots of 403 errors:
```auto
{
"type": "security_exception",
"reason": "action [indices:data/write/bulk[s]] is unauthorized for API key id [] of user [] on indices [functionbeat], this action is granted by the index privileges [create_doc,create,delete,index,write,all]"
}
```
The API key docs here [Grant access using API keys | Functionbeat Reference [7.17] | Elastic](https://www.elastic.co/guide/en/beats/functionbeat/7.17/beats-api-keys.html) don't seem to be any different to when I originally set up my api key. I did try create a new api key and added create, index and write to the index privileges but that didn't help.
Anyone seeing something similar or have any idea what I need to do to fix it? I'm hesitant to upgrade to 8 without fixing this first, but that would be a last resort.
Cheers
Carl
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 5, 2022, 1:05am UTC](https://discuss.elastic.co/t/functionbeat-cannot-index-event-security-exception/299016/2 "2022-04-05T01:05:56Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.