I'm setting up a custom index name for auditbeat.
This part has worked so far, but if I want to load the default kibana dashboards from auditbeat, I keep getting the error: "Could not locate that index-pattern"
I configured like this:
setup.ilm.enabled: false
Looking more closely, I think maybe your asterisk got swallowed in your post because you didn't format the code example as code.
I've run into your situation a few times (where the index pattern does not get created). It's hard to reproduce. I was able to create the index pattern manually in Kibana, and that seemed to work. See the Kibana docs: https://www.elastic.co/guide/en/kibana/current/index-patterns.html
Update: I was able to reproduce your problem, and the fix I suggested here didn't work. I think this might be a bug. Let me follow up with the development team to verify.
I confirmed that you can work around the problem by creating the index pattern (auditbeat-customname-*) manually in Kibana. Just make sure you also set the custom index pattern id under advanced:
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.