# Default Kibana User and uberAgent

**URL:** <https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417>\
**Category:** Kibana\
**Created:** [September 5, 2018, 1:43pm UTC](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417 "2018-09-05T13:43:14Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ryan\_Downey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ryan_downey/32/35987_2.png) [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Post date:** [September 5, 2018, 1:43pm UTC](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417/1 "2018-09-05T13:43:15Z")

</div>

Running 6.3.2  
Just installed uberAgent on all Elasticsearch nodes  
xpack is OFF (xpack.security.enabled: false) so we are currently using the default Kibana user role

Just trying to double check our understanding of a few things. If we create a new index called uberAgent in Elastic (link/steps below) and can see the index called uberagent within the Elastic Index Management why can't we see it when we go through the Create Index Patterns steps? ![uberagent](https://us1.discourse-cdn.com/elastic/original/3X/f/c/fcaf33f0285f4e82fa8db5e84d21cad1f682921e.jpeg)

 ![ipk](https://us1.discourse-cdn.com/elastic/original/3X/d/1/d16a83d646e785651b27324045df77f6fc8c1848.jpeg)

From my understanding its as simple as the user roles of our default Kibana user do not allow for the creating of new index patterns. The second step after that is that we must make sure that the index contains data in order for it to work. Appreciate you taking the time to clarify these things for us.

Side note: we do not have xpack turned on due to some issues with beats\_system connectivity...working on that as well but does not need to be addressed here.

[https://uberagent.com/docs/uberagent/latest/installation/backend/installing-elasticsearch/#configuration-for-uberagent](https://uberagent.com/docs/uberagent/latest/installation/backend/installing-elasticsearch/#configuration-for-uberagent)

---

<div class="post-metadata">

**Author:** ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\
**Post date:** [September 5, 2018, 2:00pm UTC](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417/2 "2018-09-05T14:00:45Z")

</div>

It looks like the index name is `uberagent`. In the index pattern creation window, `uberagent*` does not match any indices (since the uberagent index has not time pattern in it) so the table is showing you all available index names. If you were to tab through the pages, is `uberagent` available? Try just using the name `uberagent`.

---

<div class="post-metadata">

**Author:** ![Ryan\_Downey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ryan_downey/32/35987_2.png) [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Post date:** [September 5, 2018, 2:18pm UTC](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417/3 "2018-09-05T14:18:14Z")

</div>

After tabbing through I do not see uberagent listed when I'm on the Create Index Pattern page. As you mentioned I am only able to find the name when I'm in the Elasticsearch\>Index Management page. Is there a way to add the time pattern to it? Would any of the settings or mappings help you?

 ![uacip](https://us1.discourse-cdn.com/elastic/original/3X/4/d/4d1d1988157f6467de8ebb73d010cf42712d96b4.jpeg) ![ualist](https://us1.discourse-cdn.com/elastic/original/3X/1/1/11f3c0aa7ee9e2d9a143bd24b286c08169567fde.jpeg) ![uberagent](https://us1.discourse-cdn.com/elastic/original/3X/f/c/fcaf33f0285f4e82fa8db5e84d21cad1f682921e.jpeg)

---

<div class="post-metadata">

**Author:** ![Ryan\_Downey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ryan_downey/32/35987_2.png) [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Post date:** [September 5, 2018, 2:24pm UTC](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417/4 "2018-09-05T14:24:25Z")

</div>

![ua_get_cati](https://us1.discourse-cdn.com/elastic/original/3X/9/d/9d614b5e303965580f563aadd407bd3871d99c8b.jpeg)

---

<div class="post-metadata">

**Author:** ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\
**Post date:** [September 5, 2018, 2:33pm UTC](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417/5 "2018-09-05T14:33:58Z")

</div>

What are the uberagent index settings?

---

<div class="post-metadata">

**Author:** ![Ryan\_Downey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ryan_downey/32/35987_2.png) [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Post date:** [September 5, 2018, 2:40pm UTC](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417/6 "2018-09-05T14:40:48Z")

</div>

{  
"settings": {  
"index": {  
"number\_of\_shards": "3",  
"provided\_name": "uberagent",  
"query": {  
"default\_field": [  
"uberagent\*"  
]  
},  
"creation\_date": "1536091751135",  
"number\_of\_replicas": "2",  
"uuid": "Lxy\_4a5qQvGFNBPLV6Ym3g",  
"version": {  
"created": "6030199"  
}  
}  
},  
"defaults": {  
"index": {  
"max\_ngram\_diff": "1",  
"translog": {  
"generation\_threshold\_size": "64mb",  
"flush\_threshold\_size": "512mb",  
"sync\_interval": "5s",  
"retention": {  
"size": "512mb",  
"age": "12h"  
},  
"durability": "REQUEST"  
},  
"auto\_expand\_replicas": "false",  
"max\_inner\_result\_window": "100",  
"mapper": {  
"dynamic": "true"  
},  
"requests": {  
"cache": {  
"enable": "true"  
}  
},  
"unassigned": {  
"node\_left": {  
"delayed\_timeout": "1m"  
}  
},  
"max\_terms\_count": "65536",  
"data\_path": "",  
"highlight": {  
"max\_analyzed\_offset": "-1"  
},  
"routing": {  
"rebalance": {  
"enable": "all"  
},  
"allocation": {  
"enable": "all",  
"total\_shards\_per\_node": "-1"  
}  
},  
"search": {  
"slowlog": {  
"level": "TRACE",  
"threshold": {  
"fetch": {  
"warn": "-1",  
"trace": "-1",  
"debug": "-1",  
"info": "-1"  
},  
"query": {  
"warn": "-1",  
"trace": "-1",  
"debug": "-1",  
"info": "-1"  
}  
}  
}  
},  
"fielddata": {  
"cache": "node"  
},  
"routing\_partition\_size": "1",  
"max\_docvalue\_fields\_search": "100",  
"merge": {  
"scheduler": {  
"max\_thread\_count": "2",  
"auto\_throttle": "true",  
"max\_merge\_count": "7"  
},  
"policy": {  
"reclaim\_deletes\_weight": "2.0",  
"floor\_segment": "2mb",  
"max\_merge\_at\_once\_explicit": "30",  
"max\_merge\_at\_once": "10",  
"max\_merged\_segment": "5gb",  
"expunge\_deletes\_allowed": "10.0",  
"segments\_per\_tier": "10.0"  
}  
},  
"max\_refresh\_listeners": "1000",  
"max\_slices\_per\_scroll": "1024",  
"shard": {  
"check\_on\_startup": "false"  
},  
"load\_fixed\_bitset\_filters\_eagerly": "true",  
"number\_of\_routing\_shards": "5",  
"write": {  
"wait\_for\_active\_shards": "1"  
},  
"xpack": {  
"watcher": {  
"template": {  
"version": ""  
}  
},  
"version": ""  
},  
"percolator": {  
"map\_unmapped\_fields\_as\_text": "false",  
"map\_unmapped\_fields\_as\_string": "false"  
},  
"allocation": {  
"max\_retries": "5"  
},  
"mapping": {  
"coerce": "false",  
"nested\_fields": {  
"limit": "50"  
},  
"depth": {  
"limit": "20"  
},  
"ignore\_malformed": "false",  
"total\_fields": {  
"limit": "1000"  
}  
},  
"refresh\_interval": "1s",  
"indexing": {  
"slowlog": {  
"reformat": "true",  
"threshold": {  
"index": {  
"warn": "-1",  
"trace": "-1",  
"debug": "-1",  
"info": "-1"  
}  
},  
"source": "1000",  
"level": "TRACE"  
}  
},  
"compound\_format": "0.1",  
"blocks": {  
"metadata": "false",  
"read": "false",  
"read\_only\_allow\_delete": "false",  
"read\_only": "false",  
"write": "false"  
},  
"max\_script\_fields": "32",  
"query": {  
"parse": {  
"allow\_unmapped\_fields": "true"  
}  
},  
"format": "0",  
"max\_result\_window": "10000",  
"sort": {  
"missing": [],  
"mode": [],  
"field": [],  
"order": []  
},  
"store": {  
"stats\_refresh\_interval": "10s",  
"type": "",  
"fs": {  
"fs\_lock": "native"  
},  
"preload": []  
},  
"priority": "1",  
"queries": {  
"cache": {  
"everything": "false",  
"enabled": "true"  
}  
},  
"ttl": {  
"disable\_purge": "false"  
},  
"warmer": {  
"enabled": "true"  
},  
"codec": "default",  
"max\_rescore\_window": "10000",  
"max\_adjacency\_matrix\_filters": "100",  
"max\_shingle\_diff": "3",  
"gc\_deletes": "60s",  
"optimize\_auto\_generated\_id": "true",  
"query\_string": {  
"lenient": "false"  
}  
}  
}  
}

---

<div class="post-metadata">

**Author:** ![Bill\_McConaghy](https://avatars.discourse-cdn.com/v4/letter/b/ed655f/32.png) [@Bill\_McConaghy](https://discuss.elastic.co/u/Bill_McConaghy)\
**Post date:** [September 5, 2018, 3:49pm UTC](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417/7 "2018-09-05T15:49:39Z")

</div>

You can create an index pattern even if the index(es) it matches do not have a timefield, so that is not the issue here. This sounds like a bug to me. Would you mind creating one, adding as much detail as possible?

---

<div class="post-metadata">

**Author:** ![Ryan\_Downey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ryan_downey/32/35987_2.png) [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Post date:** [September 5, 2018, 4:11pm UTC](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417/8 "2018-09-05T16:11:17Z")

</div>

I would be happy to do so. I'm new to the community and this will be my first bug report. I've done a bit of searching around the Elastic website/community but couldnt find the proper information on bug reporting could you point me in the right direction to send one in. Thanks for looking into all of this.

UPDATE: Seems like I file a bug report on GitHub through [https://github.com/elastic/elasticsearch/issues](https://github.com/elastic/elasticsearch/issues) so I'll go with that for now unless theres some other information I'm missing.

---

<div class="post-metadata">

**Author:** ![Bill\_McConaghy](https://avatars.discourse-cdn.com/v4/letter/b/ed655f/32.png) [@Bill\_McConaghy](https://discuss.elastic.co/u/Bill_McConaghy)\
**Post date:** [September 5, 2018, 4:22pm UTC](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417/9 "2018-09-05T16:22:41Z")

</div>

Thanks Ryan. This is a Kibana bug, so please report it here: [https://github.com/elastic/kibana/issues](https://github.com/elastic/kibana/issues)

---

<div class="post-metadata">

**Author:** ![evilbit77](https://avatars.discourse-cdn.com/v4/letter/e/a6a055/32.png) [@evilbit77](https://discuss.elastic.co/u/evilbit77)\
**Post date:** [September 5, 2018, 8:45pm UTC](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417/10 "2018-09-05T20:45:34Z")

</div>

Try posting a document into the index, and then you'll likely be able to create the Index Pattern. Your document count on the index is currently 0.

---

<div class="post-metadata">

**Author:** ![Ryan\_Downey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ryan_downey/32/35987_2.png) [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Post date:** [September 13, 2018, 3:59pm UTC](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417/12 "2018-09-13T15:59:32Z")

</div>

Posting a document worked to be able to find the index. Thank you for the help.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 11, 2018, 3:59pm UTC](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417/13 "2018-10-11T15:59:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
