# I am getting an 403

**URL:** <https://discuss.elastic.co/t/i-am-getting-an-403/361524>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-monitoring, elastic-stack-alerting, docker\
**Created:** [June 14, 2024, 7:03pm UTC](https://discuss.elastic.co/t/i-am-getting-an-403/361524 "2024-06-14T19:03:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Poojan\_Mehta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/poojan_mehta/32/124537_2.png) [@Poojan\_Mehta](https://discuss.elastic.co/u/Poojan_Mehta)\
**Post date:** [June 14, 2024, 7:03pm UTC](https://discuss.elastic.co/t/i-am-getting-an-403/361524/1 "2024-06-14T19:03:31Z")

</div>

Hello,  
I am getting below error can someone pls guide

Failed to install template {:message=\>"Got response code '403' contacting Elasticsearch at URL \<es\_host\>/\_index\_template/ecs-logstash'", :exception=\>LogStash::Outputs::Elasticsearch::HttpClient::Pool::BadResponseCodeError, :backtrace=\>["D:/logstash-8.4.1/vendor/bundle/jruby/2.6.0/gems/logstash-output-elasticsearch-11.6.0-java/lib/logstash/outputs/elasticsearch/http\_client/manticore\_adapter.rb:84:in `perform_request'", "D:/logstash-8.4.1/vendor/bundle/jruby/2.6.0/gems/logstash-output-elasticsearch-11.6.0-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:324:in `perform\_request\_to\_url'", "D:/logstash-8.4.1/vendor/bundle/jruby/2.6.0/gems/logstash-output-elasticsearch-11.6.0-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:311:in `block in perform_request'", "D:/logstash-8.4.1/vendor/bundle/jruby/2.6.0/gems/logstash-output-elasticsearch-11.6.0-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:398:in `with\_connection'", "D:/logstash-8.4.1/vendor/bundle/jruby/2.6.0/gems/logstash-output-elasticsearch-11.6.0-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:310:in `perform_request'", "D:/logstash-8.4.1/vendor/bundle/jruby/2.6.0/gems/logstash-output-elasticsearch-11.6.0-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:318:in `block in Pool'", "D:/logstash-8.4.1/vendor/bundle/jruby/2.6.0/gems/logstash-output-elasticsearch-11.6.0-java/lib/logstash/outputs/elasticsearch/http\_client.rb:408:in `template_put'", "D:/logstash-8.4.1/vendor/bundle/jruby/2.6.0/gems/logstash-output-elasticsearch-11.6.0-java/lib/logstash/outputs/elasticsearch/http_client.rb:85:in `template\_install'", "D:/logstash-8.4.1/vendor/bundle/jruby/2.6.0/gems/logstash-output-elasticsearch-11.6.0-java/lib/logstash/outputs/elasticsearch/template\_manager.rb:29:in `install'", "D:/logstash-8.4.1/vendor/bundle/jruby/2.6.0/gems/logstash-output-elasticsearch-11.6.0-java/lib/logstash/outputs/elasticsearch/template_manager.rb:17:in `install\_template'", "D:/logstash-8.4.1/vendor/bundle/jruby/2.6.0/gems/logstash-output-elasticsearch-11.6.0-java/lib/logstash/outputs/elasticsearch.rb:494:in `install_template'", "D:/logstash-8.4.1/vendor/bundle/jruby/2.6.0/gems/logstash-output-elasticsearch-11.6.0-java/lib/logstash/outputs/elasticsearch.rb:318:in `finish\_register'", "D:/logstash-8.4.1/vendor/bundle/jruby/2.6.0/gems/logstash-output-elasticsearch-11.6.0-java/lib/logstash/outputs/elasticsearch.rb:283:in `block in register'", "D:/logstash-8.4.1/vendor/bundle/jruby/2.6.0/gems/logstash-output-elasticsearch-11.6.0-java/lib/logstash/plugin_mixins/elasticsearch/common.rb:154:in `block in after\_successful\_connection'"]}

---

<div class="post-metadata">

**Author:** ![Poojan\_Mehta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/poojan_mehta/32/124537_2.png) [@Poojan\_Mehta](https://discuss.elastic.co/u/Poojan_Mehta)\
**Post date:** [June 14, 2024, 7:05pm UTC](https://discuss.elastic.co/t/i-am-getting-an-403/361524/2 "2024-06-14T19:05:40Z")

</div>

{"error":{"root\_cause":[{"type":"resource\_not\_found\_exception","reason":"index template matching [ecs-logstash'] not found"}],"type":"resource\_not\_found\_exception","reason":"index template matching [ecs-logstash'] not found"},"status":404}

THe Error

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [June 16, 2024, 8:19am UTC](https://discuss.elastic.co/t/i-am-getting-an-403/361524/3 "2024-06-16T08:19:11Z")

</div>

You've posted two different errors (`403` and `404`) which one are you getting?