I'm Unable to create index pattern


(Lance) #1

Fresh install of Elasticsearch 6.3.2
Clean install of Kibana 6.3.2 in Docker
Searchguard plugin installed in both ES & Kibana

Issue as shown here:

Indices exist with documents in the indices, following a standard naming convention:

Kibana_index_template:.kibana

{
  "order": 0,
  "index_patterns": [
    ".kibana"
  ],
  "settings": {
    "index": {
  "number_of_shards": "1",
  "auto_expand_replicas": "0-1"
}
  },
  "mappings": {
    "doc": {
  "dynamic": "strict",
  "properties": {
    "type": {
      "type": "keyword"
    },
    "updated_at": {
      "type": "date"
    },
    "config": {
      "dynamic": true,
      "properties": {
        "buildNum": {
          "type": "keyword"
        }
      }
    },
    "timelion-sheet": {
      "properties": {
        "description": {
          "type": "text"
        },
        "hits": {
          "type": "integer"
        },
        "kibanaSavedObjectMeta": {
          "properties": {
            "searchSourceJSON": {
              "type": "text"
            }
          }
        },
        "timelion_chart_height": {
          "type": "integer"
        },
        "timelion_columns": {
          "type": "integer"
        },
        "timelion_interval": {
          "type": "keyword"
        },
        "timelion_other_interval": {
          "type": "keyword"
        },
        "timelion_rows": {
          "type": "integer"
        },
        "timelion_sheet": {
          "type": "text"
        },
        "title": {
          "type": "text"
        },
        "version": {
          "type": "integer"
        }
      }
    },
    "graph-workspace": {
      "properties": {
        "description": {
          "type": "text"
        },
        "kibanaSavedObjectMeta": {
          "properties": {
            "searchSourceJSON": {
              "type": "text"
            }
          }
        },
        "numLinks": {
          "type": "integer"
        },
        "numVertices": {
          "type": "integer"
        },
        "title": {
          "type": "text"
        },
        "version": {
          "type": "integer"
        },
        "wsState": {
          "type": "text"
        }
      }
    },
    "index-pattern": {
      "properties": {
        "fieldFormatMap": {
          "type": "text"
        },
        "fields": {
          "type": "text"
        },
        "intervalName": {
          "type": "keyword"
        },
        "notExpandable": {
          "type": "boolean"
        },
        "sourceFilters": {
          "type": "text"
        },
        "timeFieldName": {
          "type": "keyword"
        },
        "title": {
          "type": "text"
        }
      }
    },
    "visualization": {
      "properties": {
        "description": {
          "type": "text"
        },
        "kibanaSavedObjectMeta": {
          "properties": {
            "searchSourceJSON": {
              "type": "text"
            }
          }
        },
        "savedSearchId": {
          "type": "keyword"
        },
        "title": {
          "type": "text"
        },
        "uiStateJSON": {
          "type": "text"
        },
        "version": {
          "type": "integer"
        },
        "visState": {
          "type": "text"
        }
      }
    },
    "search": {
      "properties": {
        "columns": {
          "type": "keyword"
        },
        "description": {
          "type": "text"
        },
        "hits": {
          "type": "integer"
        },
        "kibanaSavedObjectMeta": {
          "properties": {
            "searchSourceJSON": {
              "type": "text"
            }
          }
        },
        "sort": {
          "type": "keyword"
        },
        "title": {
          "type": "text"
        },
        "version": {
          "type": "integer"
        }
      }
    },
    "dashboard": {
      "properties": {
        "description": {
          "type": "text"
            },
            "hits": {
              "type": "integer"
            },
            "kibanaSavedObjectMeta": {
              "properties": {
                "searchSourceJSON": {
                  "type": "text"
                }
              }
            },
            "optionsJSON": {
              "type": "text"
            },
            "panelsJSON": {
              "type": "text"
            },
            "refreshInterval": {
              "properties": {
                "display": {
                  "type": "keyword"
                },
                "pause": {
                  "type": "boolean"
                },
                "section": {
                  "type": "integer"
                },
                "value": {
                  "type": "integer"
               }
              }
            },
            "timeFrom": {
              "type": "keyword"
        },
        "timeRestore": {
          "type": "boolean"
        },
        "timeTo": {
          "type": "keyword"
        },
        "title": {
          "type": "text"
        },
        "uiStateJSON": {
          "type": "text"
        },
        "version": {
          "type": "integer"
        }
      }
    },
    "url": {
      "properties": {
        "accessCount": {
          "type": "long"
        },
        "accessDate": {
          "type": "date"
        },
        "createDate": {
          "type": "date"
        },
        "url": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 2048
            }
          }
        }
     }
    },
    "server": {
      "properties": {
        "uuid": {
          "type": "keyword"
        }
      }
        }
      }
    }
  },
  "aliases": {}
}

(Thomas Neirynck) #2

hi @lzukel,

What happens when you press the "check for new data" button? That should refresh the page in Kibana and give you the form to create an index pattern.


(Lance) #3

The first screenshot was taken after press the "check for new data" button


(Lance) #4

The first screenshot was taken after press the "check for new data" button
Kibana attempts to find indices, then returns to the same as first screenshot


(Lance) #5

Still looking for a proposed resolution to this issue


(Lance) #6

Still having this issue


(Bhavya R M) #7

@jen-huang - I am not sure whats happening here?

Thanks,
Bhavya


(Bill McConaghy) #8

@lzukel A couple of questions: where did you get the docker image you are using for Kibana? I did encounter an issue with a third party Docker image recently so wondering if this might be what you are using. Also, wondering if you can share the network requests that Kibana is making when you visit the create index page. That will help us to diagnose this issue.


(system) #9

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.