# Basic Elastic Stack Install Failure

**URL:** <https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901>\
**Category:** Elasticsearch\
**Created:** [September 6, 2016, 5:35pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901 "2016-09-06T17:35:14Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![phillipbroberts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/phillipbroberts/32/11777_2.png) [@phillipbroberts](https://discuss.elastic.co/u/phillipbroberts)\
**Post date:** [September 6, 2016, 5:35pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/1 "2016-09-06T17:35:14Z")

</div>

I have a basic setup of ELK. I can see data flowing through logstash and into elastisearch. All of the indices are Green and healthy. However when I fire up Kibana 4.5.4 for the first time, and select the logstash-\* pattern, select @timestamp as the timefield name kibana becomes unresponsive (for the most part)

I open up chrome developer tools and see this error regardless of what I try to do in Kibana:

commons.bundle.js?v=10000:40136 TypeError: Cannot read property 'fields' of undefined  
at ittr (kibana.bundle.js?v=10000:79301)  
at commons.bundle.js?v=10000:8563  
at baseForOwn (commons.bundle.js?v=10000:7536)  
at Function.forOwn (commons.bundle.js?v=10000:8868)  
at applyESResp (kibana.bundle.js?v=10000:79299)  
at processQueue (commons.bundle.js?v=10000:42404)  
at commons.bundle.js?v=10000:42420  
at Scope.$eval (commons.bundle.js?v=10000:43648)  
at Scope.$digest (commons.bundle.js?v=10000:43459)  
at Scope.$apply (commons.bundle.js?v=10000:43756)(anonymous function) @ commons.bundle.js?v=10000:40136(anonymous function) @ commons.bundle.js?v=10000:36905processQueue @ commons.bundle.js?v=10000:42412(anonymous function) @ commons.bundle.js?v=10000:42420$eval @ commons.bundle.js?v=10000:43648$digest @ commons.bundle.js?v=10000:43459$apply @ commons.bundle.js?v=10000:43756done @ commons.bundle.js?v=10000:38205completeRequest @ commons.bundle.js?v=10000:38403requestLoaded @ commons.bundle.js?v=10000:38344

I have tried everything I can think of to resolve this however I cannot figure out where I am going wrong. Any pointers would be helpful.

---

<div class="post-metadata">

**Author:** ![Bargs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bargs/32/5429_2.png) [@Bargs](https://discuss.elastic.co/u/Bargs)\
**Post date:** [September 6, 2016, 7:10pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/2 "2016-09-06T19:10:48Z")

</div>

What version of Elasticsearch are you running? Kibana 4.5.x is only compatible with Elasticsearch 2.3.x.

Do you see the error immediately after selecting @timestamp as the timefield, or after clicking the "Create" button? Any plugins installed?

---

<div class="post-metadata">

**Author:** ![phillipbroberts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/phillipbroberts/32/11777_2.png) [@phillipbroberts](https://discuss.elastic.co/u/phillipbroberts)\
**Post date:** [September 6, 2016, 8:19pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/3 "2016-09-06T20:19:29Z")

</div>

Thank you for the reply!

I am running Elasticsearch 2.4

{  
"name" : "ra\_search\_10.199.4.240",  
"cluster\_name" : "ra\_search\_cluster",  
"version" : {  
"number" : "2.4.0",  
"build\_hash" : "ce9f0c7394dee074091dd1bc4e9469251181fc55",  
"build\_timestamp" : "2016-08-29T09:14:17Z",  
"build\_snapshot" : false,  
"lucene\_version" : "5.5.2"  
},  
"tagline" : "You Know, for Search"  
}

I did just reinstall Kibana as Kibana version 4.6.1 and drop the .kibana index. I still get the same result. I do see this error after clicking the "Create" button.

No plugins installed, right now I am just trying to get the most basic ELK stack running to demo for a client.

---

<div class="post-metadata">

**Author:** ![phillipbroberts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/phillipbroberts/32/11777_2.png) [@phillipbroberts](https://discuss.elastic.co/u/phillipbroberts)\
**Post date:** [September 6, 2016, 8:32pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/4 "2016-09-06T20:32:00Z")

</div>

I went back and dropped all of my indicies in ES. Then recreated the data. This time when I attempted to fire up Kibana 4.6.1 for the first time and create the default index I got this error:

commons.bundle.js?v=10146:40184 Error: Request to Elasticsearch failed: "[document\_source\_missing\_exception] [config][4.6.1]: document source missing, with: {"shard":"0","index":".kibana"}"  
at kibana.bundle.js?v=10146:80547  
at processQueue (commons.bundle.js?v=10146:42452)  
at commons.bundle.js?v=10146:42468  
at Scope.$eval (commons.bundle.js?v=10146:43696)  
at Scope.$digest (commons.bundle.js?v=10146:43507)  
at Scope.$apply (commons.bundle.js?v=10146:43804)  
at done (commons.bundle.js?v=10146:38253)  
at completeRequest (commons.bundle.js?v=10146:38451)  
at XMLHttpRequest.requestLoaded (commons.bundle.js?v=10146:38392)(anonymous function) @ commons.bundle.js?v=10146:40184(anonymous function) @ commons.bundle.js?v=10146:36953processQueue @ commons.bundle.js?v=10146:42460(anonymous function) @ commons.bundle.js?v=10146:42468$eval @ commons.bundle.js?v=10146:43696$digest @ commons.bundle.js?v=10146:43507$apply @ commons.bundle.js?v=10146:43804done @ commons.bundle.js?v=10146:38253completeRequest @ commons.bundle.js?v=10146:38451requestLoaded @ commons.bundle.js?v=10146:38392

---

<div class="post-metadata">

**Author:** ![Bargs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bargs/32/5429_2.png) [@Bargs](https://discuss.elastic.co/u/Bargs)\
**Post date:** [September 6, 2016, 8:52pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/5 "2016-09-06T20:52:45Z")

</div>

What platform are you running Kibana and ES on? Any chance you could share a sample document you see the error with? Any detailed steps to reproduce would be helpful.

---

<div class="post-metadata">

**Author:** ![phillipbroberts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/phillipbroberts/32/11777_2.png) [@phillipbroberts](https://discuss.elastic.co/u/phillipbroberts)\
**Post date:** [September 6, 2016, 8:53pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/6 "2016-09-06T20:53:09Z")

</div>

I got it working.

I installed elasticsearch and kibana from downloadable RPM's from their respective pages (which yields version 4.6.1 of Kibana and 2.4.0 of Elasticsearch) - recreated the data and everything seems to be working properly.

Previously we were installing everything from yum repo's, which leads me to believe that the elastic RHEL repo's are providing mismatched versions of the toolset.

---

<div class="post-metadata">

**Author:** ![Bargs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bargs/32/5429_2.png) [@Bargs](https://discuss.elastic.co/u/Bargs)\
**Post date:** [September 6, 2016, 9:02pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/7 "2016-09-06T21:02:08Z")

</div>

What URL are you using for the repo? In Kibana 4.6 we switched to minor versions for the url naming scheme, so you'll need to update the repo to `https://packages.elastic.co/kibana/4.6/centos`

---

<div class="post-metadata">

**Author:** ![phillipbroberts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/phillipbroberts/32/11777_2.png) [@phillipbroberts](https://discuss.elastic.co/u/phillipbroberts)\
**Post date:** [September 6, 2016, 9:06pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/8 "2016-09-06T21:06:41Z")

</div>

For some reason we are pointing to /kibana/4.5/centos - I am honestly not sure why or how that happened.

Are there any plans to create a /kibana /elasticsearch that would just install latest stable?

---

<div class="post-metadata">

**Author:** ![Bargs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bargs/32/5429_2.png) [@Bargs](https://discuss.elastic.co/u/Bargs)\
**Post date:** [September 6, 2016, 9:28pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/9 "2016-09-06T21:28:47Z")

</div>

In 5.x we'll most likely switch to major version naming, the code to do so has already been merged: [https://github.com/elastic/kibana/issues/6728](https://github.com/elastic/kibana/issues/6728)

That should make upgrades much easier in the future. In 4.x we've stuck with minor version structuring for consistency.

---

<div class="post-metadata">

**Author:** ![phillipbroberts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/phillipbroberts/32/11777_2.png) [@phillipbroberts](https://discuss.elastic.co/u/phillipbroberts)\
**Post date:** [September 7, 2016, 5:12pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/10 "2016-09-07T17:12:10Z")

</div>

Interesting enough, this morning I rebuilt the entire cluster using Kiaban 4.6.x and ElasticSearch 2.4.x - I had the same problem for some reason.

ElasticSearch came from this repository:  
[elasticsearch-2.x]  
name=Elasticsearch repository for 2.x packages  
baseurl=https://packages.elastic.co/elasticsearch/2.x/centos  
gpgcheck=0  
gpgkey=https://packages.elastic.co/GPG-KEY-elasticsearch  
enabled=1

I downloaded the ElasticSearch rpm from [https://download.elastic.co/elasticsearch/release/org/elasticsearch/distribution/rpm/elasticsearch/2.4.0/elasticsearch-2.4.0.rpm](https://download.elastic.co/elasticsearch/release/org/elasticsearch/distribution/rpm/elasticsearch/2.4.0/elasticsearch-2.4.0.rpm), yum removed the version that installed from the repository and rpm -i this file and it works fine.

They both report as version 2.4.0 - I can't imagine there would be a breaking change between builds?!

---

<div class="post-metadata">

**Author:** ![Bargs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bargs/32/5429_2.png) [@Bargs](https://discuss.elastic.co/u/Bargs)\
**Post date:** [September 7, 2016, 5:54pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/11 "2016-09-07T17:54:49Z")

</div>

Just so I understand:

Elasticsearch 2.4.0 installed from the repo didn't work with Kibana 4.6.1.

Elasticsearch 2.4.0 installed directly from rpm worked with Kibana 4.6.1.

Was the Kibana install exactly the same between tests? Did you do anything differently with the repo install? Perhaps there was some config left over from a previous install? I'm not sure what the yum equivalent to `apt-get purge` is but I would try to ensure you're working with a totally fresh install.

---

<div class="post-metadata">

**Author:** ![phillipbroberts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/phillipbroberts/32/11777_2.png) [@phillipbroberts](https://discuss.elastic.co/u/phillipbroberts)\
**Post date:** [September 7, 2016, 6:05pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/12 "2016-09-07T18:05:55Z")

</div>

You are correct.

These are fresh instances each time we build. So there is nothing left over.

Is the RPM linked from the Downloads page the same exact RPM that is provided from the Yum repository?

---

<div class="post-metadata">

**Author:** ![Bargs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bargs/32/5429_2.png) [@Bargs](https://discuss.elastic.co/u/Bargs)\
**Post date:** [September 7, 2016, 8:01pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/13 "2016-09-07T20:01:31Z")

</div>

Sorry, not sure about that, I would assume so. I've moved this topic to the elasticsearch category so that someone more knowledgeable can weigh in.

---

<div class="post-metadata">

**Author:** ![phillipbroberts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/phillipbroberts/32/11777_2.png) [@phillipbroberts](https://discuss.elastic.co/u/phillipbroberts)\
**Post date:** [September 7, 2016, 8:03pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/14 "2016-09-07T20:03:32Z")

</div>

Thanks Matt! I appreciate your help! For now I have written our chef scripts to just pull the rpm package from the download link, not ideal in the long run, but it gets the job done.

---

<div class="post-metadata">

**Author:** ![phillipbroberts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/phillipbroberts/32/11777_2.png) [@phillipbroberts](https://discuss.elastic.co/u/phillipbroberts)\
**Post date:** [September 7, 2016, 8:23pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/15 "2016-09-07T20:23:29Z")

</div>

Scratch everything I said.

The issue is definitely not with the install package. It is something in our chef scripts that is being configured. Whenever I uninstall elasticsearch and reinstall elasticsearch the problem goes away, I think so does the configurations that are coming from chef.

---

<div class="post-metadata">

**Author:** ![phillipbroberts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/phillipbroberts/32/11777_2.png) [@phillipbroberts](https://discuss.elastic.co/u/phillipbroberts)\
**Post date:** [September 7, 2016, 8:48pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/16 "2016-09-07T20:48:00Z")

</div>

Yep. I just rewrote the recipe to do nothing but install elasticsearch and start it, and everything works fine, that is from yum. Sorry for the fire drill. ☹

Now... to figure out what is breaking from a configuration standpoint in elasticsearch.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 10:21pm UTC](https://discuss.elastic.co/t/basic-elastic-stack-install-failure/59901/17 "2017-07-05T22:21:58Z")

</div>


