# Unexpected exception indices:data/write/index

**URL:** <https://forum.opensearch.org/t/unexpected-exception-indices-data-write-index/3194>\
**Category:** Security\
**Created:** [June 28, 2020, 4:44am UTC](https://forum.opensearch.org/t/unexpected-exception-indices-data-write-index/3194 "2020-06-28T04:44:46Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![lorenzo95](https://avatars.discourse-cdn.com/v4/letter/l/c57346/32.png) [@lorenzo95](https://forum.opensearch.org/u/lorenzo95)\
**Post date:** [June 28, 2020, 4:44am UTC](https://forum.opensearch.org/t/unexpected-exception-indices-data-write-index/3194/1 "2020-06-28T04:44:46Z")

</div>

HI All,

New user here. I grabbed the docker-compose file ([Docker - Open Distro Documentation](https://opendistro.github.io/for-elasticsearch-docs/docs/install/docker/)) and started up a cluster. Now I am trying to create an api key so I can try winlogbeat.

When I login as admin and run  
POST /\_security/api\_key  
{  
“name”: “filebeat\_host001”,  
“role\_descriptors”: {  
“filebeat\_writer”: {  
“cluster”: [“monitor”, “read\_ilm”],  
“index”: [  
{  
“names”: [“filebeat-\*”],  
“privileges”: [“view\_index\_metadata”, “create\_doc”]  
}  
]  
}  
}  
}

I get  
{  
“error” : {  
“root\_cause” : [  
{  
“type” : “security\_exception”,  
“reason” : “Unexpected exception indices:data/write/index”  
}  
],  
“type” : “security\_exception”,  
“reason” : “Unexpected exception indices:data/write/index”  
},  
“status” : 500  
}

That looks a bit strange. I also don’t see a place to view or create api keys in kibana?  
I don’t see any mention of api keys in the documentation. Any hint to what I am missing here?

Thank you

---

<div class="post-metadata">

**Author:** ![Anthony](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/anthony/32/9939_2.png) [@Anthony](https://forum.opensearch.org/u/Anthony)\
**Post date:** [April 30, 2021, 9:28am UTC](https://forum.opensearch.org/t/unexpected-exception-indices-data-write-index/3194/2 "2021-04-30T09:28:46Z")

</div>

@lorenzo95 I think you are trying to use features from elastic x-pack security module, which are not part of odfe.