# Can not create index patterns for filebeat-\*, but I can see the logs from kibana's logs plugin **URL:** \ **Category:** Kibana\ **Created:** [June 29, 2019, 5:50am UTC](https://discuss.elastic.co/t/can-not-create-index-patterns-for-filebeat-but-i-can-see-the-logs-from-kibanas-logs-plugin/188126 "2019-06-29T05:50:51Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![yuecong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yuecong/32/49061_2.png) [@yuecong](https://discuss.elastic.co/u/yuecong)\ **Post date:** [June 29, 2019, 5:50am UTC](https://discuss.elastic.co/t/can-not-create-index-patterns-for-filebeat-but-i-can-see-the-logs-from-kibanas-logs-plugin/188126/1 "2019-06-29T05:50:51Z")
I just installed Elastic Stack 7.2 using Azure ARM template and configured fiebeats to export data to it. Everything looks works pretty straightforward. I can see the logs from kibana's logs plugin and also see the metrics for beats and everything looks works well. But, I can not create index patterns using filebeat-\*, even the logs plugin are able to use the same pattern to show logs. I tried to both creating an index pattern manually and have filebeats to create it by importing some built-in filebeats dashboard, unfortunately, both failed. The error message is ```auto Failed to fetch Error: Failed to fetch at http://xxx.xxx.xxx.xxx:5601/bundles/commons.bundle.js:3:1605400 ``` Also here is one snapshot to show all filebeat indices are healthy. ![09%20PM](https://us1.discourse-cdn.com/elastic/original/3X/a/6/a63025d74aa927d110da21e000dfa7bfd8e99d62.png) ---
**Author:** ![yuecong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yuecong/32/49061_2.png) [@yuecong](https://discuss.elastic.co/u/yuecong)\ **Post date:** [July 1, 2019, 5:22am UTC](https://discuss.elastic.co/t/can-not-create-index-patterns-for-filebeat-but-i-can-see-the-logs-from-kibanas-logs-plugin/188126/2 "2019-07-01T05:22:26Z")
In the above environment, I tried sample data and those data works, and I am able to get the kibana index patterns, dashboards, etc. What could be the issue that only filebeat-\* indices can not create kibana index patterns? ---
**Author:** ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)\ **Post date:** [July 1, 2019, 1:18pm UTC](https://discuss.elastic.co/t/can-not-create-index-patterns-for-filebeat-but-i-can-see-the-logs-from-kibanas-logs-plugin/188126/3 "2019-07-01T13:18:54Z")
Hey @yuecong, welcome to the discussion boards! This is a rather interesting problem. So the sample data works correctly, and the Logs UI is able to stream these filebeat-\* logs, but you're unable to create filebeat-\* index patterns. Are you able to manually create any other index patterns? For example, can you create a pattern of `kibana*`? ---
**Author:** ![yuecong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yuecong/32/49061_2.png) [@yuecong](https://discuss.elastic.co/u/yuecong)\ **Post date:** [July 1, 2019, 5:06pm UTC](https://discuss.elastic.co/t/can-not-create-index-patterns-for-filebeat-but-i-can-see-the-logs-from-kibanas-logs-plugin/188126/4 "2019-07-01T17:06:48Z")
> [@Larry\_Gregory](#): > > kibana\* Yes, I can manually create index patterns for other indices. e.g. Here are the snapshot I created index patterns for the sample data and the one index pattern for the system indicies even. ![index_pattern_kibana*](https://us1.discourse-cdn.com/elastic/original/3X/5/6/56815ec337ec52621ffa028da4fad3ded045c2ff.png) ![index_pattern_monitoring*](https://us1.discourse-cdn.com/elastic/original/3X/b/4/b46d78f479061676d033271206914a202241dae1.png) ---
**Author:** ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)\ **Post date:** [July 1, 2019, 5:10pm UTC](https://discuss.elastic.co/t/can-not-create-index-patterns-for-filebeat-but-i-can-see-the-logs-from-kibanas-logs-plugin/188126/5 "2019-07-01T17:10:48Z")
Thanks for the update. Can you post your Kibana logs after attempting to create a `filebeat-*` index pattern? If possible, I'd also like to get a HAR of this process so that I can see what the browser is sending/receiving during this process. There's a guide here showing how to capture a HAR: [https://support.cloudflare.com/hc/en-us/articles/203118044-How-do-I-generate-a-HAR-file-](https://support.cloudflare.com/hc/en-us/articles/203118044-How-do-I-generate-a-HAR-file-) If you can generate a HAR, please DM that to me rather than posting in the public board. ---
**Author:** ![yuecong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yuecong/32/49061_2.png) [@yuecong](https://discuss.elastic.co/u/yuecong)\ **Post date:** [July 17, 2019, 5:54am UTC](https://discuss.elastic.co/t/can-not-create-index-patterns-for-filebeat-but-i-can-see-the-logs-from-kibanas-logs-plugin/188126/6 "2019-07-17T05:54:21Z")
Thanks @Larry_Gregory for the help. close this one as we can not reproduce it now. ---
**Author:** ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)\ **Post date:** [July 17, 2019, 12:31pm UTC](https://discuss.elastic.co/t/can-not-create-index-patterns-for-filebeat-but-i-can-see-the-logs-from-kibanas-logs-plugin/188126/7 "2019-07-17T12:31:22Z")
My pleasure! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 14, 2019, 12:31pm UTC](https://discuss.elastic.co/t/can-not-create-index-patterns-for-filebeat-but-i-can-see-the-logs-from-kibanas-logs-plugin/188126/8 "2019-08-14T12:31:22Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.