Overriding the default setting is forbidden ignoring – How to solve this Elasticsearch error

Opster Team

Aug-23, Version: 6.8-6.8

Briefly, this error occurs when you try to override a default setting in Elasticsearch that is not allowed to be changed. This could be due to security reasons or to prevent system instability. To resolve this issue, you can either stop trying to change the forbidden setting or consult the Elasticsearch documentation to understand which settings are allowed to be changed. If you’re using a managed Elasticsearch service, you may need to contact your service provider for further assistance.

This guide will help you check for common problems that cause the log ” overriding the default [{}} setting is forbidden. ignoring… ” to appear. To understand the issues related to this log, read the explanation below about the following Elasticsearch concepts: plugin, index.

Log Context

Log “overriding the default [{}} setting is forbidden. ignoring…” classname is IndexAuditTrail.java.
We extracted the following from Elasticsearch source code for those seeking an in-depth context :


        // Filter out forbidden setting
        return Settings.builder().put(newSettings.filter(name -> {
            if (FORBIDDEN_INDEX_SETTING.equals(name)) {
                logger.warn("overriding the default [{}} setting is forbidden. ignoring..."; name);
                return false;
            return true;


How helpful was this guide?

We are sorry that this post was not useful for you!

Let us improve this post!

Tell us how we can improve this post?