# Is it safe to modify system index template settings?

**URL:** <https://discuss.elastic.co/t/is-it-safe-to-modify-system-index-template-settings/319894>\
**Category:** Elasticsearch\
**Created:** [November 27, 2022, 9:38pm UTC](https://discuss.elastic.co/t/is-it-safe-to-modify-system-index-template-settings/319894 "2022-11-27T21:38:42Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![windows95](https://avatars.discourse-cdn.com/v4/letter/w/a8b319/32.png) [@windows95](https://discuss.elastic.co/u/windows95)\
**Post date:** [November 27, 2022, 9:38pm UTC](https://discuss.elastic.co/t/is-it-safe-to-modify-system-index-template-settings/319894/1 "2022-11-27T21:38:42Z")

</div>

I have a single node installation. This leads to an yellow/unhealthy status when indices have replication configured. In my case there are these system indices which cause problems:

.internal.alerts-observability.logs.alerts-default-\*  
.siem-signals-default-\*

When I attempt to edit the template setting for these indices I get a warning that this could break Kibana. Is it safe to just deactivate replication?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 30, 2022, 1:03am UTC](https://discuss.elastic.co/t/is-it-safe-to-modify-system-index-template-settings/319894/2 "2022-11-30T01:03:56Z")

</div>

It depends. You can do it, but they will be overwritten when you upgrade.

What version are you running?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 28, 2022, 1:04am UTC](https://discuss.elastic.co/t/is-it-safe-to-modify-system-index-template-settings/319894/3 "2022-12-28T01:04:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
