[bug] setup.dashboards.index not working for filebeat nor winlogbeat

Elastic Stack Beats
,
1

Hello there!

I'm using ELK 7.13.0.
After setting setup.dashboards.index and setup.dashboards.enabled: true, Dashboards, searches and visualizations are loaded, but Dashboads shows
Could not locate that index-pattern (id: winlogbeat-*)
Could not locate that index-pattern (id: filebeat-*)

In this post it's said that

The index pattern is hard coded

but this goes against the current Filebeat Reference

Below are the relevant parts of both my winlogbeat.yml and filebeat.yml config files

#winlogbeat.yml:
setup.dashboards.enabled: true
setup.dashboards.index: "activedirectory-*"
setup.kibana:
  host: "https://kibana.foo.bar"
  space.id: "activedirectory"

#filebeat.yml:
    setup.dashboards.enabled: true
    setup.dashboards.index: "azure-*"
    setup.kibana:
      host: "https://kibana.foo.bar"
      space.id: "azure"

Also, for filebeat, I'm using o365 module but all dashboards are installed, leaving kind of a mess in my space, no possible setup.dashboards.beat setting could prevent it. I tried a handful of settings as "O365", "Filebeat-O365-Audit", "O365-Audit", "Filebeat-O365", "o365audit", "Filebeat o365, "o365" with no success. There could be a list of accepted values in the reference page
edit: I'm posting the o365 issue in another thread to not mix things up here

2

Just so I fully understand, u tried to change the index pattern of the dashboards using the setting and it loaded them but didn't appear to have any affect?

3

Correct!
The dashboars were loaded but still using the same default index pattern used by each beat client

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.