# Elasticsearch Java exception. Kibana Unable to fetch mapping. Do you have indices matching the pattern

**URL:** https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478
**Category:** Kibana
**Created:** [November 2, 2015, 5:03am UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478 "2015-11-02T05:03:41Z")
**Posts on this page:** 15
**Page:** 1

<div class="post-metadata">

### Author: ![pradeepreddy3](https://avatars.discourse-cdn.com/v4/letter/p/c68b51/32.png) [@pradeepreddy3](https://discuss.elastic.co/u/pradeepreddy3)
#### Post date: [November 2, 2015, 5:03am UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478/1 "2015-11-02T05:03:41Z")

</div>

I have setup with  
Kibana 2.0.0  
Logstash 2.0.0,  
ElasticSearch 2.0.0 and  
logstash-forwarder 0.4.0.

I don't see any error messages for Logstash-forwarder, Logstash, Kibana.

On Kibana UI I see message as "Unable to fetch mapping. Do you have indices matching the pattern"

AND on elasticsearch there is java exception as

[2015-11-01 23:31:58,787][INFO][node] [Shatter] started  
[2015-11-01 23:31:59,125][INFO][gateway] [Shatter] recovered [3] indices into cluster\_state  
[2015-11-01 23:36:00,697][INFO][rest.suppressed] /logstash-_/\_mapping/field/_ Params: {ignore\_unavailable=false, allow\_no\_indices=false, index=logstash-_, include\_defaults=true, fields=_, \_=1446438960583}  
[logstash-\*] IndexNotFoundException[no such index]  
at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver$WildcardExpressionResolver.resolve(IndexNameExpressionResolver.java:630)

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [November 2, 2015, 5:07am UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478/2 "2015-11-02T05:07:40Z")

</div>

Do you have data in `logstash-` named indices in ES?

---

<div class="post-metadata">

### Author: ![pradeepreddy3](https://avatars.discourse-cdn.com/v4/letter/p/c68b51/32.png) [@pradeepreddy3](https://discuss.elastic.co/u/pradeepreddy3)
#### Post date: [November 2, 2015, 5:11am UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478/3 "2015-11-02T05:11:33Z")

</div>

Can you help me out with how to check data is available in "logstash-" named incides in ES.

More info.  
curl ':9200/\_cat/health?v' give output as  
epoch timestamp cluster status node.total node.data shards pri relo init unassign pending\_tasks max\_task\_wait\_time active\_shards\_percent  
1446440953 00:09:13 elasticsearch yellow 1 1 11 11 0 0 11 0 - 50.0%

curl ':9200\_cat/indices?v' gives output as  
health status index pri rep docs.count docs.deleted store.size pri.store.size  
yellow open shakespeare\_bulk 5 1 0 0 780b 780b  
yellow open shakespeare 5 1 0 0 780b 780b  
yellow open .kibana 1 1 1 0 2.9kb 2.9kb

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [November 2, 2015, 5:15am UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478/4 "2015-11-02T05:15:58Z")

</div>

That's what you need to do 🙂 And as you can see you don't have anything with the name `logstash-` in ES.

So you either need to change the pattern to suit one of the existing indices, the `shakespeare` ones, or import some data with Logstash.

---

<div class="post-metadata">

### Author: ![pradeepreddy3](https://avatars.discourse-cdn.com/v4/letter/p/c68b51/32.png) [@pradeepreddy3](https://discuss.elastic.co/u/pradeepreddy3)
#### Post date: [November 2, 2015, 5:52am UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478/5 "2015-11-02T05:52:06Z")

</div>

Correction in version of Kibana. Its Kibana 4.2.0.

Is there any config file where I can mention the "loghash-" indices.  
If not can you help me out with how can I

1. Add new indices.
2. Update existing indices.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [November 2, 2015, 5:54am UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478/6 "2015-11-02T05:54:31Z")

</div>

Take a look at [https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html](https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html)

But ultimately, what sort of data do you want to index with ES?

---

<div class="post-metadata">

### Author: ![pradeepreddy3](https://avatars.discourse-cdn.com/v4/letter/p/c68b51/32.png) [@pradeepreddy3](https://discuss.elastic.co/u/pradeepreddy3)
#### Post date: [November 2, 2015, 6:03am UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478/7 "2015-11-02T06:03:36Z")

</div>

At end of the day I want to monitor all the logs.  
eg. syslog, authlog.

Did not face any problem when used.  
Kibana: 4.0.1  
Elasticsearch: 1.4.5  
Logstash: 1.5.4

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [November 2, 2015, 6:06am UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478/8 "2015-11-02T06:06:48Z")

</div>

All you need to do is apply the same process for your previous setup, but just send it to your new cluster.

---

<div class="post-metadata">

### Author: ![pradeepreddy3](https://avatars.discourse-cdn.com/v4/letter/p/c68b51/32.png) [@pradeepreddy3](https://discuss.elastic.co/u/pradeepreddy3)
#### Post date: [November 2, 2015, 6:19am UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478/9 "2015-11-02T06:19:01Z")

</div>

Thanks for you help. Warkolm .  
I applied the same process. All seems to be good except indices error.

Only difference is

1. In previous process I installed most of the components using apt-get . In current process I am using tar files.
2. Difference in versions of all the components.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [November 2, 2015, 6:26am UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478/10 "2015-11-02T06:26:44Z")

</div>

You should really use the apt repos to keep it simple.

The versions won't matter, as long as you have setup the stack using the same process you will have data going into ES, that you can view with KB.

---

<div class="post-metadata">

### Author: ![pradeepreddy3](https://avatars.discourse-cdn.com/v4/letter/p/c68b51/32.png) [@pradeepreddy3](https://discuss.elastic.co/u/pradeepreddy3)
#### Post date: [November 2, 2015, 7:00am UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478/11 "2015-11-02T07:00:56Z")

</div>

Yes, Using apt repos keeps it simple.

But I wanted to try out a way I can keep everything( init script, config, bin ) under folder.

Can you help me out with understanding how this indices work.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [November 2, 2015, 7:44am UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478/12 "2015-11-02T07:44:50Z")

</div>

(At a high level) Indices are what ES uses to store data. You can send data to ES using Logstash.

---

<div class="post-metadata">

### Author: ![dabing](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dabing/32/6713_2.png) [@dabing](https://discuss.elastic.co/u/dabing)
#### Post date: [August 23, 2016, 5:07am UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478/13 "2016-08-23T05:07:46Z")

</div>

> [@warkolm](#):
>
> You can s

hi,whats your logstach.conf

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [August 23, 2016, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478/14 "2016-08-23T08:22:12Z")

</div>

Please start a new thread, this is really old and you've given no one details about what you want.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:40pm UTC](https://discuss.elastic.co/t/elasticsearch-java-exception-kibana-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/33478/15 "2017-07-06T13:40:33Z")

</div>


