# Kibana not able to save searches **URL:** \ **Category:** Kibana\ **Created:** [December 19, 2018, 7:35am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464 "2018-12-19T07:35:43Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![osamaikhlas](https://avatars.discourse-cdn.com/v4/letter/o/4bbf92/32.png) [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\ **Post date:** [December 19, 2018, 7:35am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/1 "2018-12-19T07:35:43Z")
Not able to save searches and can't edit in anything kibana. it gives me error forbidden error 403 ---
**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Post date:** [December 19, 2018, 4:46pm UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/2 "2018-12-19T16:46:06Z")
> [@osamaikhlas](#): > > e searches and can't edit in anything kibana. it gives me error forbidden error 403 HI More information would be helpful. Logs, screenshots , steps , version? Is there a proxy in between ? Cheers Rashmi ---
**Author:** ![osamaikhlas](https://avatars.discourse-cdn.com/v4/letter/o/4bbf92/32.png) [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\ **Post date:** [December 20, 2018, 7:08am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/3 "2018-12-20T07:08:53Z")
I am using 6.5.0 version Here are some screen shot ![DSC_0522](https://us1.discourse-cdn.com/elastic/original/3X/6/9/69cc388093fb2fa45c761294f18d0a81ec60105a.jpeg) ![DSC_0521](https://us1.discourse-cdn.com/elastic/original/3X/d/b/dbbc3e6a8cdfc3046b6b919d8c25c342b16f0340.jpeg) ---
**Author:** ![osamaikhlas](https://avatars.discourse-cdn.com/v4/letter/o/4bbf92/32.png) [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\ **Post date:** [December 28, 2018, 4:39am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/4 "2018-12-28T04:39:36Z")
waiting for your response ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [December 28, 2018, 4:52am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/5 "2018-12-28T04:52:52Z")
It looks like you are running out of disk space and have exceeded the flood level watermark which causes indices to become read-only. Free up disk space or add resources to get below the watermark. Then [Use the APIs to make indices writeable](https://www.elastic.co/guide/en/elasticsearch/reference/6.5/disk-allocator.html). ---
**Author:** ![osamaikhlas](https://avatars.discourse-cdn.com/v4/letter/o/4bbf92/32.png) [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\ **Post date:** [December 28, 2018, 4:59am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/6 "2018-12-28T04:59:53Z")
how to free up the disk space ? is there is any limit of storing logs on elastic search in basic license? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [December 28, 2018, 8:48am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/7 "2018-12-28T08:48:24Z")
To protect the system indices are made read only once less than 5% of disk space remains. How much you can store therefore depends on how much disk you have available, and is not limited by license. You can resolve this by deleting indices or add capacity to the cluster. ---
**Author:** ![osamaikhlas](https://avatars.discourse-cdn.com/v4/letter/o/4bbf92/32.png) [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\ **Post date:** [December 28, 2018, 10:49am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/8 "2018-12-28T10:49:31Z")
I can't able to delete any indices or anything.it gives me the same error and I have 500 GB of storage and there is lots of space available ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [December 29, 2018, 8:45am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/9 "2018-12-29T08:45:04Z")
If you are using Linux, what is the output of `df -k`? What does your `elasticsearch.yml` file look like? ---
**Author:** ![osamaikhlas](https://avatars.discourse-cdn.com/v4/letter/o/4bbf92/32.png) [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\ **Post date:** [December 31, 2018, 7:19am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/10 "2018-12-31T07:19:24Z")
if there is no limit on storage for pushing logs in elasticsearch than why in monitoring tab of kibana showing me this ![DSC_0568](https://us1.discourse-cdn.com/elastic/original/3X/0/6/06fe17b40c6522c84a18109be36ce793d7c99000.jpeg) ![DSC_0569](https://us1.discourse-cdn.com/elastic/original/3X/e/d/ed1097d2e86b99c5007d5f4e8a4824bb8e3f6a16.jpeg) ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [December 31, 2018, 9:08am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/11 "2018-12-31T09:08:29Z")
I can not see much in those pictures. Please take a proper screenshot or copy and paste text instead of a picture of a screen if you need to share this type of information. From what I can see it seems you are below 85% usage for all mount points. Have you used [the APIs to make the indices writable](https://www.elastic.co/guide/en/elasticsearch/reference/6.5/disk-allocator.html)? What are the current settings of e.g. the .kibana index? ---
**Author:** ![osamaikhlas](https://avatars.discourse-cdn.com/v4/letter/o/4bbf92/32.png) [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\ **Post date:** [December 31, 2018, 9:33am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/12 "2018-12-31T09:33:11Z")
No i didn't use API's to make the indices writable. can you please tell me how to show you the kibana settings and please tell how to resolve the problem of storage if there is no limit on pushing data in elasticsearch. ![Screenshot%20from%202018-12-31%2009-23-00](https://us1.discourse-cdn.com/elastic/original/3X/c/a/ca48207787cb26e3e929944ef2085f17cadcf3bd.png) ![Screenshot%20from%202018-12-31%2009-24-50](https://us1.discourse-cdn.com/elastic/original/3X/3/1/3173f1123bb747d9ce1318cbd12c869e0503d96c.png) ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [December 31, 2018, 9:34am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/13 "2018-12-31T09:34:46Z")
You need to use the API once you have freed up space as described in the docs I linked to. ---
**Author:** ![osamaikhlas](https://avatars.discourse-cdn.com/v4/letter/o/4bbf92/32.png) [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\ **Post date:** [December 31, 2018, 9:35am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/14 "2018-12-31T09:35:49Z")
In which docs? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [December 31, 2018, 9:37am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/15 "2018-12-31T09:37:18Z")
Seems I missed adding the link. Have edited my earlier post. ---
**Author:** ![osamaikhlas](https://avatars.discourse-cdn.com/v4/letter/o/4bbf92/32.png) [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\ **Post date:** [December 31, 2018, 10:04am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/16 "2018-12-31T10:04:54Z")
Facing diffculties can you plaese tell me how to use system storage for elasticsearch Thankyou in Advance ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [December 31, 2018, 10:06am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/17 "2018-12-31T10:06:10Z")
I do not understand your question. Did you use the API I linked to? What exact problem are you facing? ---
**Author:** ![osamaikhlas](https://avatars.discourse-cdn.com/v4/letter/o/4bbf92/32.png) [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\ **Post date:** [December 31, 2018, 10:10am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/18 "2018-12-31T10:10:44Z")
Look I have space of 500 GB where my logs are saved in system so i want to load more logs in the elastic search but i think there is no space left in elasticsearch nodes . So how can i use the system space for transfering logs to kibana ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [December 31, 2018, 10:22am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/19 "2018-12-31T10:22:00Z")
Is there anything apart from Elasticsearch data that is taking up space on that partition? How much of that 500GB is available to Elasticsearch? One thing that can take up space without being seen in index statistics is the transaction log. This is used to speed up recovery within a cluster, but if you are running just a single node you can [change the settings](https://www.elastic.co/guide/en/elasticsearch/reference/6.5/index-modules-translog.html) and keep less around for a shorter time period and save space that way. ---
**Author:** ![osamaikhlas](https://avatars.discourse-cdn.com/v4/letter/o/4bbf92/32.png) [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\ **Post date:** [December 31, 2018, 10:41am UTC](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464/20 "2018-12-31T10:41:47Z")
you can see the result of df -k where logmon folder is of 500 GB and its is used 15% only. i want to allocate this folder space to elastic search can you tell me how can i do it ![Screenshot%20from%202018-12-31%2009-24-50](https://us1.discourse-cdn.com/elastic/original/3X/3/1/3173f1123bb747d9ce1318cbd12c869e0503d96c.png) [Next page](https://discuss.elastic.co/t/kibana-not-able-to-save-searches/161464.md?page=2)