# Need help with resolving - security\_exception - no permissions for \[indices:admin/create\] and User \[name=logstash

**URL:** https://discuss.elastic.co/t/need-help-with-resolving-security-exception-no-permissions-for-indices-admin-create-and-user-name-logstash/241038
**Category:** Logstash
**Tags:** elastic-stack-security
**Created:** [July 13, 2020, 11:30pm UTC](https://discuss.elastic.co/t/need-help-with-resolving-security-exception-no-permissions-for-indices-admin-create-and-user-name-logstash/241038 "2020-07-13T23:30:53Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![roligupt](https://avatars.discourse-cdn.com/v4/letter/r/b782af/32.png) [@roligupt](https://discuss.elastic.co/u/roligupt)
#### Post date: [July 13, 2020, 11:30pm UTC](https://discuss.elastic.co/t/need-help-with-resolving-security-exception-no-permissions-for-indices-admin-create-and-user-name-logstash/241038/1 "2020-07-13T23:30:53Z")

</div>

I just deployed a new ELK instance in K8 platform. i keep getting these errors -

[logstash.outputs.elasticsearch][main] retrying failed action with response code: 403 ({"type"=\>"security\_exception", "reason"=\>"no permissions for [indices:admin/create] and User [name=logstash, backend\_roles=[logstash, all\_access], requestedTenant=null]"})

Also the filebeat is pointed to this logstash but the data doesnt show up on Kibana -

i get the similar error for any non admin account (the data doesnt show up for admin account either)

security\_exception",  
"reason" : "no permissions for [indices:data/read/search] and User [name=, backend\_roles=, requestedTenant= **user**]"

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 10, 2020, 11:30pm UTC](https://discuss.elastic.co/t/need-help-with-resolving-security-exception-no-permissions-for-indices-admin-create-and-user-name-logstash/241038/2 "2020-08-10T23:30:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
