How fix “Failed to import index-pattern”

When i`m try setup metricbeat dashboard i get error.

i run this command:
// metricbeat setup --dashboards
and got this error:
metricbeat setup --dashboards Loading dashboards (Kibana must be running and reachable) Exiting: Failed to import index-pattern: Failed to load directory /usr/share/metricbeat/kibana/6/index-pattern: error loading /usr/share/metricbeat/kibana/6/index- pattern/metricbeat.json: blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];. Response: {"objects":[{"id":"metricbeat-*","type":"index- pattern","error":{"message":"blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];"}}]}
i try this :


it doesnt help me. in my hard drive im got more then 40% free space i restart elastic, kibana, metricbeat nothing help. all elastick stack installed on one server and metricbeat. also i`m try remove index metricbeat* - not help pls help !

can you share your filebeat config especially the way how your Kibana endpoint is configured
and also Kibana config would be useful to see if kibana is secured...

hi ! thanks for answer.
I have problem with metricbeat not filebeat.
my metricbeat config:

  # Glob pattern for configuration loading
  path: ${path.config}/modules.d/*.yml
  reload.enabled: false
  index.number_of_shards: 1
  index.codec: best_compression

  host: ""

  hosts: [""]
  - add_host_metadata: ~
  - add_cloud_metadata: ~

my Kibana config:
# Kibana is served by a back end server. This setting specifies the port to use.
server.port: 5601 ""

elasticsearch.hosts: [""]

that is all .

What is your elastic search config like? It reminds me of the kind of error you get if you have security enabled but don't have a user setup for metric beat to manage indexes and write with.

This is my elasticsearch config:

cat /etc/elasticsearch/elasticsearch.yml | grep -v '#' /var/lib/elasticsearch
path.logs: /var/log/elasticsearch
http.port: 9200
GET metricbeat-*/_settings

If you run that from dev tools in kibana does it output anything?

when i`m run this:

GET metricbeat-*/_settings

i get:

  "metricbeat-6.7.1-2019.09.11" : {
    "settings" : {
      "index" : {
        "codec" : "best_compression",
        "mapping" : {
          "total_fields" : {
            "limit" : "10000"
        }, ......

Ohh.. So i cant solve this issue ?
Can i try something else ?
Can i config metricbeats for use some other index ? , not metricbeat* which - broken.
Or can i some how purge elastic index ?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.