# Elasticsearch index not visible

**URL:** <https://discuss.elastic.co/t/elasticsearch-index-not-visible/114548>\
**Category:** Elasticsearch\
**Created:** [January 8, 2018, 3:07pm UTC](https://discuss.elastic.co/t/elasticsearch-index-not-visible/114548 "2018-01-08T15:07:14Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![rrs](https://avatars.discourse-cdn.com/v4/letter/r/d9b06d/32.png) [@rrs](https://discuss.elastic.co/u/rrs)\
**Post date:** [January 8, 2018, 3:07pm UTC](https://discuss.elastic.co/t/elasticsearch-index-not-visible/114548/1 "2018-01-08T15:07:14Z")

</div>

Hi All,

I setup ELK stack 5.6.3. The issue is that Elastic nodes in my cluster are creating indexes with defined name, but when we query /\_cat/indices, created indexes are not showing and Kibana dashboard as well. Can you please help me here.

Elasticsearch Log:  
[2018-01-08T09:45:11,694][INFO][t.b.r.a.ACL] ALLOWED by { name: '::LOGSTASH::', policy: ALLOW} req={ ID:492301056-870312458#562108, TYP:BulkRequest, CGR:N/A, USR:logstash, BRS:true, ACT:indices:data/write/bulk, OA:10.10.71.24, IDX:NginxAccess-2018.01.08, MET:POST, PTH:/\_bulk, CNT:\<OMITTED, LENGTH=3155\>, HDR:Accept-Encoding,Authorization,Connection,Content-Length,Content-Type,Host,User-Agent, HIS:[::LOGSTASH::-\>[indices-\>true, auth\_key-\>true, actions-\>true]] }

Status Report:  
[root@prd-elk1 ~]# curl -XGET -uelastic prd-elk1:9200/\_cat/indices?v  
Enter host password for user 'elastic':  
health status index uuid pri rep docs.count docs.deleted store.size pri.store.size  
green open .kibana UGs00zcQQUW0jteLI4J4IA 1 1 3 0 33.3kb 16.6kb  
[root@prd-elk1 ~]#

---

<div class="post-metadata">

**Author:** ![A\_B](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/a_b/32/17104_2.png) [@A\_B](https://discuss.elastic.co/u/A_B)\
**Post date:** [January 8, 2018, 4:10pm UTC](https://discuss.elastic.co/t/elasticsearch-index-not-visible/114548/2 "2018-01-08T16:10:12Z")

</div>

Do you have more than one node in your cluster? If so, what does this show you?

> [@rrs](#):
>
> curl -XGET -u elastic prd-elk1:9200/\_cat/nodes

What about is you create an index through the API? Somethign like

```
curl -XPUT -u elastic 'prd-elk1:9200/test?pretty' -H 'Content-Type: application/json' -d'
{
    "settings" : {
        "index" : {
            "number_of_shards" : 3, 
            "number_of_replicas" : 2 
        }
    }
}
'

```

---

<div class="post-metadata">

**Author:** ![val](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/val/32/138203_2.png) [@val](https://discuss.elastic.co/u/val)\
**Post date:** [January 8, 2018, 4:13pm UTC](https://discuss.elastic.co/t/elasticsearch-index-not-visible/114548/3 "2018-01-08T16:13:33Z")

</div>

It looks like you have XPack security installed with LDAP authentication, is that right? Can you try to query `_cat/indices` with your LOGSTASH user and not the `elastic` one. What do you see?

---

<div class="post-metadata">

**Author:** ![rrs](https://avatars.discourse-cdn.com/v4/letter/r/d9b06d/32.png) [@rrs](https://discuss.elastic.co/u/rrs)\
**Post date:** [January 8, 2018, 4:23pm UTC](https://discuss.elastic.co/t/elasticsearch-index-not-visible/114548/4 "2018-01-08T16:23:56Z")

</div>

Hi,  
The output is

[root@prd-elk1 ~]# curl -XGET -uelastic prd-elk1:9200/\_cat/nodes?v  
ip heap.percent ram.percent cpu load\_1m load\_5m load\_15m node.role master name  
10.10.71.25 8 84 0 0.02 0.02 0.05 mdi - prd-elk2  
10.10.71.24 4 84 0 0.00 0.02 0.05 mdi - prd-elk1  
10.10.71.26 8 84 0 0.00 0.01 0.05 mdi \* prd-elk3  
10.77.71.23 12 62 0 0.08 0.03 0.05 - - prd-kib1

[root@prd-elk1 ~]# curl -XGET -uelastic 'prd-elk1:9200/NginxAccess-2018.01.08/\_settings'  
Enter host password for user 'elastic':  
{"error":{"root\_cause":[{"type":"index\_not\_found\_exception","reason":"no such index","index\_uuid":"_na_","resource.type":"index\_or\_alias","[resource.id](http://resource.id)":"NginxAccess-2018.01.08","index":"NginxAccess-2018.01.08"}],"type":"index\_not\_found\_exception","reason":"no such index","index\_uuid":"_na_","resource.type":"index\_or\_alias","[resource.id](http://resource.id)":"NginxAccess-2018.01.08","index":"NginxAccess-2018.01.08"},"status":404}

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [January 8, 2018, 4:31pm UTC](https://discuss.elastic.co/t/elasticsearch-index-not-visible/114548/5 "2018-01-08T16:31:49Z")

</div>

Can you try with the index name in lower-case?

---

<div class="post-metadata">

**Author:** ![val](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/val/32/138203_2.png) [@val](https://discuss.elastic.co/u/val)\
**Post date:** [January 8, 2018, 4:32pm UTC](https://discuss.elastic.co/t/elasticsearch-index-not-visible/114548/6 "2018-01-08T16:32:34Z")

</div>

Index names should be all lowercase, so I'm not sure that Logstash creates any index at all

---

<div class="post-metadata">

**Author:** ![rrs](https://avatars.discourse-cdn.com/v4/letter/r/d9b06d/32.png) [@rrs](https://discuss.elastic.co/u/rrs)\
**Post date:** [January 8, 2018, 4:52pm UTC](https://discuss.elastic.co/t/elasticsearch-index-not-visible/114548/7 "2018-01-08T16:52:37Z")

</div>

Perfect, after changing the index to lower case, we see listed indexes and Kibana dashboard as well 😄

Thanks all for your wonderful quick [root@prd-elk1 ~]# curl -XGET -uelastic prd-elk1:9200/\_cat/indices?v  
Enter host password for user 'elastic':  
health status index uuid pri rep docs.count docs.deleted store.size pri.store.size  
green open .kibana UGs00zcQQUW0jteLI4J4IA 1 1 3 0 33.3kb 16.6kb  
green open nginxaccess-2018.01.08 -D\_LRWaURH-ie\_9RMAaCVQ 5 1 2998 0 3.7mb 1.7mb.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 5, 2018, 4:52pm UTC](https://discuss.elastic.co/t/elasticsearch-index-not-visible/114548/8 "2018-02-05T16:52:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
