# ELK - Fresh setup: Could not locate that index-pattern-field

**URL:** <https://discuss.elastic.co/t/elk-fresh-setup-could-not-locate-that-index-pattern-field/126308>\
**Category:** Kibana\
**Created:** [March 31, 2018, 9:12am UTC](https://discuss.elastic.co/t/elk-fresh-setup-could-not-locate-that-index-pattern-field/126308 "2018-03-31T09:12:08Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![syfy323](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syfy323/32/29429_2.png) [@syfy323](https://discuss.elastic.co/u/syfy323)\
**Post date:** [March 31, 2018, 9:12am UTC](https://discuss.elastic.co/t/elk-fresh-setup-could-not-locate-that-index-pattern-field/126308/1 "2018-03-31T09:12:08Z")

</div>

Hi!

I am new to ELK.

I just set up a 3 node cluster (V6.2, latest):

- Node 1: Elasticsearch
- Node 2: Kibana, Nginx, Filebeat, Metricbeat
- Node 3: Logstash

I have connected a client VM using filebeat to logstash and I can see log events at discover.

As soon as I open Dashboard, it shows lot's of errors:

- Could not locate that index-pattern-field (id: apache2.access.remote\_ip)
- Could not locate that index-pattern-field (id: apache2.access.response\_code)
- ...

> [root@slde6001 ~]# metricbeat setup  
> Loaded index template  
> Loaded dashboards

> [root@slde6001 ~]# filebeat setup  
> Loaded index template  
> Loaded dashboards  
> Loaded machine learning job configurations

I already deleted the "filebeat\*" index and recreated with above commands.  
Then I sent new log rows to filebeat which also displayed fine on discover but dashboards are still not functioning.

Any ideas?

Kind regards,  
Kevin

---

<div class="post-metadata">

**Author:** ![jbudz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jbudz/32/45922_2.png) [@jbudz](https://discuss.elastic.co/u/jbudz)\
**Post date:** [April 2, 2018, 2:54pm UTC](https://discuss.elastic.co/t/elk-fresh-setup-could-not-locate-that-index-pattern-field/126308/2 "2018-04-02T14:54:18Z")

</div>

Hey,

can you verify that filebeat and metricbeat are also version 6.2? Occasionally Kibana updates its saved objects format, and the dashboards uploaded by metricbeat need to match.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 30, 2018, 2:54pm UTC](https://discuss.elastic.co/t/elk-fresh-setup-could-not-locate-that-index-pattern-field/126308/3 "2018-04-30T14:54:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.