Cannot create Index Patterns of remote clusters - Kibana 7.10.0

Hi, we are facing some problems creating index patterns in the 7.10.0 version.

When trying to create the index pattern of a remote cluster we got the error No matching indices found. However, the indexes do exist (the indexes are shown in the first step of the index pattern creation).

In step two, we can see there is something wrong before clicking on Create index pattern since the Time field menu does not appear, even when there are indices with timestamps.

We got the following error after creating the index pattern:

If we go to Discover, the documents are displayed, but since there are no fields in the index pattern, it does not allow filtering using the document's fields.

If we create the index pattern using the API and adding some initial fields, they do appear on Discover and we can filter by them, but the index pattern can not be refreshed (we got the same error No matching indices found) so new fields can not be added to the index pattern.

Is this a known bug?

Best regards,
Mayte Ariza

Hello @Phandora ,

Is there any reason why you are trying to make all the log sources in one index !!?
I think it's for that, that you are getting errors
If you want to create an index, create one for each beat,

Example: one for filebeat-* and another one for packetbeat- ....etc

Hi @TheHunter1,

It was just an example to explain our issue.

The remote index pattern fails for every index pattern we attempt to create, even for sample indices:

  • Create index in remote cluster:
curl -XPUT -H 'Content-Type: application/json' localhost:9200/books/_doc/1 -d '{"Dracula": "Bram Stoker"}'
  • Create index pattern in centralized environment:

This may help you,

Could you be more specific? Is this in the kibana.yml or the main interface?

Hey All, I'm running into the exact same problem and the proposed solutions doesn't actually work. Anyone had any luck in solving this?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.