# Searchgurad index deleted

**URL:** <https://forum.search-guard.com/t/searchgurad-index-deleted/1162>\
**Category:** Search Guard\
**Created:** [October 19, 2018, 8:41pm UTC](https://forum.search-guard.com/t/searchgurad-index-deleted/1162 "2018-10-19T20:41:39Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rudra](https://avatars.discourse-cdn.com/v4/letter/r/47e85d/32.png) [@Rudra](https://forum.search-guard.com/u/Rudra)\
**Post date:** [October 19, 2018, 8:41pm UTC](https://forum.search-guard.com/t/searchgurad-index-deleted/1162/1 "2018-10-19T20:41:39Z")

</div>

When asking questions, please provide the following information:

- Search Guard and Elasticsearch version 6.1

- Installed and used enterprise modules, if any searchguard 6.1

- JVM version and operating system version jdk1.8.0\_181 and centos 6.7

- Search Guard configuration files

- Elasticsearch log messages on debug level

- Other installed Elasticsearch or Kibana plugins, if any

How to recreate it ?

---

<div class="post-metadata">

**Author:** ![Rudra](https://avatars.discourse-cdn.com/v4/letter/r/47e85d/32.png) [@Rudra](https://forum.search-guard.com/u/Rudra)\
**Post date:** [October 22, 2018, 4:17pm UTC](https://forum.search-guard.com/t/searchgurad-index-deleted/1162/2 "2018-10-22T16:17:01Z")

</div>

can some one please answer

> **···**
>
> On Friday, October 19, 2018 at 3:41:39 PM UTC-5, rud wrote:
> 
> > When asking questions, please provide the following information:
> 
> > - Search Guard and Elasticsearch version 6.1
> 
> > - Installed and used enterprise modules, if any searchguard 6.1
> 
> > - JVM version and operating system version jdk1.8.0\_181 and centos 6.7
> 
> > - Search Guard configuration files
> 
> > - Elasticsearch log messages on debug level
> 
> > - Other installed Elasticsearch or Kibana plugins, if any
> 
> > 
> 
> > 
> 
> > How to recreate it ?

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [October 22, 2018, 6:08pm UTC](https://forum.search-guard.com/t/searchgurad-index-deleted/1162/3 "2018-10-22T18:08:59Z")

</div>

I don’t understand. Are you saying you have deleted the Search Guard index? Did you use an admin certificate for that? I’m asking because on a SG secured cluster you can’t just delete the SG index without using an admin certificate.

But to answer your question - you simply use sgadmin to create a new one.

> **···**
>
> On Monday, October 22, 2018 at 6:17:01 PM UTC+2, rud wrote:
> 
> > can some one please answer
> > 
> > On Friday, October 19, 2018 at 3:41:39 PM UTC-5, rud wrote:
> > 
> > > When asking questions, please provide the following information:
> 
> > > - Search Guard and Elasticsearch version 6.1
> 
> > > - Installed and used enterprise modules, if any searchguard 6.1
> 
> > > - JVM version and operating system version jdk1.8.0\_181 and centos 6.7
> 
> > > - Search Guard configuration files
> 
> > > - Elasticsearch log messages on debug level
> 
> > > - Other installed Elasticsearch or Kibana plugins, if any
> 
> > >
> 
> > >
> 
> > > How to recreate it ?

---

<div class="post-metadata">

**Author:** ![Rudra](https://avatars.discourse-cdn.com/v4/letter/r/47e85d/32.png) [@Rudra](https://forum.search-guard.com/u/Rudra)\
**Post date:** [October 22, 2018, 6:43pm UTC](https://forum.search-guard.com/t/searchgurad-index-deleted/1162/4 "2018-10-22T18:43:30Z")

</div>

I did not use admin certificate to delete searchguard index (we do have admin certificates installed on cluster) , I have deleted searchguard index from kibana.  
I wanted to recreate the searchguard index.

Thanks

> **···**
>
> On Oct 22, 2018, at 1:08 PM, Jochen Kressin [jkressin@floragunn.com](mailto:jkressin@floragunn.com) wrote:
> 
> > I don’t understand. Are you saying you have deleted the Search Guard index? Did you use an admin certificate for that? I’m asking because on a SG secured cluster you can’t just delete the SG index without using an admin certificate.
> 
> > But to answer your question - you simply use sgadmin to create a new one.
> > 
> > On Monday, October 22, 2018 at 6:17:01 PM UTC+2, rud wrote:
> > 
> > > can some one please answer
> > > 
> > > On Friday, October 19, 2018 at 3:41:39 PM UTC-5, rud wrote:
> > > 
> > > > When asking questions, please provide the following information:
> 
> > > > - Search Guard and Elasticsearch version 6.1
> 
> > > > - Installed and used enterprise modules, if any searchguard 6.1
> 
> > > > - JVM version and operating system version jdk1.8.0\_181 and centos 6.7
> 
> > > > - Search Guard configuration files
> 
> > > > - Elasticsearch log messages on debug level
> 
> > > > - Other installed Elasticsearch or Kibana plugins, if any
> 
> > > >
> 
> > > >
> 
> > > > How to recreate it ?
> 
> > –
> > 
> > You received this message because you are subscribed to a topic in the Google Groups “Search Guard Community Forum” group.
> > 
> > To unsubscribe from this topic, visit [https://groups.google.com/d/topic/search-guard/l3gHaBgtIWo/unsubscribe](https://groups.google.com/d/topic/search-guard/l3gHaBgtIWo/unsubscribe).
> > 
> > To unsubscribe from this group and all its topics, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com).
> > 
> > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com).
> > 
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/7f024e91-cc14-4d0a-af8f-d14a0ea27090%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/7f024e91-cc14-4d0a-af8f-d14a0ea27090%40googlegroups.com?utm_medium=email&utm_source=footer).
> > 
> > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [October 22, 2018, 7:13pm UTC](https://forum.search-guard.com/t/searchgurad-index-deleted/1162/5 "2018-10-22T19:13:21Z")

</div>

Hi, sorry, but I still don’t understand this: “I have deleted searchguard index from kibana”. What do you mean by it?

Background: The Search Guard index is an index on Elasticsearch which has special access checks that prevent it from being modified (CRUD) without an admin TLS certificate. It has in fact nothing to do with Kibana. It’s just the index where we store the SG configuration. So if Search Guard is installed on Elasticsearch you cannot just delete the index, at least not without an admin cert. So that’s why I don’t fully understand what you mean by " deleted searchguard index from kibana".

> **···**
>
> On Monday, October 22, 2018 at 8:43:34 PM UTC+2, rud wrote:
> 
> > I did not use admin certificate to delete searchguard index (we do have admin certificates installed on cluster) , I have deleted searchguard index from kibana.  
> > I wanted to recreate the searchguard index.
> > 
> > Thanks
> 
> > On Oct 22, 2018, at 1:08 PM, Jochen Kressin [jkressin@floragunn.com](mailto:jkressin@floragunn.com) wrote:
> 
> > > I don’t understand. Are you saying you have deleted the Search Guard index? Did you use an admin certificate for that? I’m asking because on a SG secured cluster you can’t just delete the SG index without using an admin certificate.
> 
> > > But to answer your question - you simply use sgadmin to create a new one.
> > > 
> > > On Monday, October 22, 2018 at 6:17:01 PM UTC+2, rud wrote:
> > > 
> > > > can some one please answer
> > > > 
> > > > On Friday, October 19, 2018 at 3:41:39 PM UTC-5, rud wrote:
> > > > 
> > > > > When asking questions, please provide the following information:
> 
> > > > > - Search Guard and Elasticsearch version 6.1
> 
> > > > > - Installed and used enterprise modules, if any searchguard 6.1
> 
> > > > > - JVM version and operating system version jdk1.8.0\_181 and centos 6.7
> 
> > > > > - Search Guard configuration files
> 
> > > > > - Elasticsearch log messages on debug level
> 
> > > > > - Other installed Elasticsearch or Kibana plugins, if any
> 
> > > > >
> 
> > > > >
> 
> > > > > How to recreate it ?
> 
> > > –
> > > 
> > > You received this message because you are subscribed to a topic in the Google Groups “Search Guard Community Forum” group.
> > > 
> > > To unsubscribe from this topic, visit [https://groups.google.com/d/topic/search-guard/l3gHaBgtIWo/unsubscribe](https://groups.google.com/d/topic/search-guard/l3gHaBgtIWo/unsubscribe).
> > > 
> > > To unsubscribe from this group and all its topics, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com).
> > > 
> > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com).
> > > 
> > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/7f024e91-cc14-4d0a-af8f-d14a0ea27090%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/7f024e91-cc14-4d0a-af8f-d14a0ea27090%40googlegroups.com?utm_medium=email&utm_source=footer).
> > > 
> > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
