# Export dashboard to Kibana fail
**URL:** https://discuss.elastic.co/t/export-dashboard-to-kibana-fail/151141
**Category:** Beats
**Tags:** filebeat
**Created:** [October 5, 2018, 3:04am UTC](https://discuss.elastic.co/t/export-dashboard-to-kibana-fail/151141 "2018-10-05T03:04:12Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@mcoa](https://discuss.elastic.co/u/mcoa)
#### Post date: [October 5, 2018, 3:04am UTC](https://discuss.elastic.co/t/export-dashboard-to-kibana-fail/151141/1 "2018-10-05T03:04:12Z")
Hello,
I'm try export dashboard to Kibana from filebeat but some dashboard give error (field not found). my client i've:
filebeat.yml
```auto
filebeat.inputs:
- type: log
enabled: true
paths:
-/var/log/secure
filebeat.config.modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: false
setup.template.settings:
index.number_of_shards: 3
setup.dashboards.enabled: true
setup.dashboards.directory: ${path.home}/kibana
setup.dashboards.index: filebeat-*
setup.kibana:
host: "192.168.0.xxx:5601"
output.logstash:
hosts: ["192.168.0.xxx:5044"]
```
And system module:
```auto
[root@web01 modules.d]# cat system.yml |grep -v "#"
- module: system
syslog:
enabled: true
var.paths: ["/var/log/messages"]
auth:
enabled: true
var.paths: ["/var/log/secure"]
```
In the "visualize" the field is empty (the same with other dashboard and visualize from filebeat)
Thanks.
---
### Author:  [@kvch](https://discuss.elastic.co/u/kvch)
#### Post date: [October 5, 2018, 6:24am UTC](https://discuss.elastic.co/t/export-dashboard-to-kibana-fail/151141/2 "2018-10-05T06:24:16Z")
How have you exported the dashboards?
---
### Author:  [@mcoa](https://discuss.elastic.co/u/mcoa)
#### Post date: [October 5, 2018, 12:48pm UTC](https://discuss.elastic.co/t/export-dashboard-to-kibana-fail/151141/3 "2018-10-05T12:48:30Z")
Hi,
I'm exported dashboard with command
```auto
filebeat setup --dashboards
```
And the `filebeat.yml` i've setting the value:
```auto
setup.dashboards.enabled: true
```
Thanks.
---
### Author:  [@kvch](https://discuss.elastic.co/u/kvch)
#### Post date: [October 5, 2018, 1:34pm UTC](https://discuss.elastic.co/t/export-dashboard-to-kibana-fail/151141/4 "2018-10-05T13:34:16Z")
Dashboards need index templates also which are also imported by `filebeat setup`. You need to run `filebeat setup` without the flag.
---
### Author:  [@mcoa](https://discuss.elastic.co/u/mcoa)
#### Post date: [October 5, 2018, 1:56pm UTC](https://discuss.elastic.co/t/export-dashboard-to-kibana-fail/151141/5 "2018-10-05T13:56:53Z")
I execute the command and change te output to elastic but not found..
```auto
[root@web01 filebeat]# filebeat setup
Loaded index template
Loading dashboards (Kibana must be running and reachable)
Loaded dashboards
Loaded machine learning job configurations
```
```auto
output.elasticsearch:
hosts: ["192.168.0.xxx:9200"]
```
Output log
```auto
|2018-10-05T10:41:09.296-0300|INFO|elasticsearch/client.go:712|Connected to Elasticsearch version 6.4.1|
|---|---|---|---|
|2018-10-05T10:41:09.297-0300|INFO|kibana/client.go:113|Kibana url: http://192.168.0.xxx:5601|
|2018-10-05T10:41:37.452-0300|INFO|instance/beat.go:659|Kibana dashboards successfully loaded.|
|2018-10-05T10:41:37.452-0300|INFO|elasticsearch/client.go:163|Elasticsearch url: http://192.168.0.xxx:9200|
|2018-10-05T10:41:37.455-0300|INFO|elasticsearch/client.go:712|Connected to Elasticsearch version 6.4.1|
|2018-10-05T10:41:37.455-0300|INFO|kibana/client.go:113|Kibana url: http://192.168.0.xxx:5601|
```
For example,from Kibana -\> visualize -\> select "SSH login attempts [Filebeat System]" , and the field is empty but search option and only list with ...keyboard `system.auth.ssh.event.keyword` when the doc says `system.auth.ssh.event` .
---
### Author:  [@mcoa](https://discuss.elastic.co/u/mcoa)
#### Post date: [October 8, 2018, 9:33pm UTC](https://discuss.elastic.co/t/export-dashboard-to-kibana-fail/151141/6 "2018-10-08T21:33:49Z")
Hello,
The solution was delete an rebuild the filebeat and .kibana index. No idea what was wrong before.
Thanks.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 5, 2018, 9:33pm UTC](https://discuss.elastic.co/t/export-dashboard-to-kibana-fail/151141/7 "2018-11-05T21:33:51Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.