# Importing vulnwhisperer kibana.json file for out of the box visualization in kibana dashboard

**URL:** <https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889>\
**Category:** Kibana\
**Created:** [September 16, 2020, 10:47pm UTC](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889 "2020-09-16T22:47:07Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Subhadeep](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/subhadeep/32/75713_2.png) [@Subhadeep](https://discuss.elastic.co/u/Subhadeep)\
**Post date:** [September 16, 2020, 10:47pm UTC](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889/1 "2020-09-16T22:47:07Z")

</div>

Hello Guys,  
I am extracting reports from Openvas through vulnwhisperer and I would like to view it on my kibana dashboard. I have the configuration file provided by vulnwhisperer which is kibana.json. Could anyone please tell me how can I import it into kibana so that I can get a out of the box vizualization of vulnwhisperer in kibana. I really need your help guys. Thank you so much in advance. I am using elasticsearch and kibana version 7.8.0. Please let me know if you need any other information. Thanks.

---

<div class="post-metadata">

**Author:** ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)\
**Post date:** [September 17, 2020, 7:33am UTC](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889/2 "2020-09-17T07:33:11Z")

</div>

I suppose you are referring to this file: [https://github.com/HASecuritySolutions/VulnWhisperer/blob/master/resources/elk6/kibana.json](https://github.com/HASecuritySolutions/VulnWhisperer/blob/master/resources/elk6/kibana.json) ?  
Go to Mangement \> Saved Objects and use the "Import" button there.

---

<div class="post-metadata">

**Author:** ![Subhadeep](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/subhadeep/32/75713_2.png) [@Subhadeep](https://discuss.elastic.co/u/Subhadeep)\
**Post date:** [September 17, 2020, 7:52am UTC](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889/3 "2020-09-17T07:52:29Z")

</div>

Hello @flash1293. Thank you for your response. Yes, I am talking about that exact file. However, there is another file called **kibana\_APIonly.json**. Which one should I import? Thanks again for your help.

---

<div class="post-metadata">

**Author:** ![Subhadeep](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/subhadeep/32/75713_2.png) [@Subhadeep](https://discuss.elastic.co/u/Subhadeep)\
**Post date:** [September 17, 2020, 8:42am UTC](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889/4 "2020-09-17T08:42:55Z")

</div>

@flash1293  
Another thing is although I inserted the logstash-vulnwhisperer-template\_elk7.json template to the elasticsearch with the following command:  
cat logstash-vulnwhisperer-template\_elk7.json | curl -XPUT 'https://:9200/\_template/logstash' -u username:password -k -H 'Content-Type: application/json' -d @-

But when I go to saved objects and suppose open the VulnWhisperer - Reporting, it gives the following error:  
[timelion\_vis] \> Timelion request error: undefined Error: in cell #1: Elasticsearch index not found: logstash-vulnwhisperer-\*

Could you please tell me what I might be missing?? Thank a ton again.

---

<div class="post-metadata">

**Author:** ![Subhadeep](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/subhadeep/32/75713_2.png) [@Subhadeep](https://discuss.elastic.co/u/Subhadeep)\
**Post date:** [September 17, 2020, 1:09pm UTC](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889/5 "2020-09-17T13:09:21Z")

</div>

@flash1293 Hi, I just deleted the logstash-vulnwhisperer-\* from the index pattern in the kibana dashboard. and then tried to put it back with the previous command. But now it does not show the logstash-vulnwhisperer-\* index.  
I just tried to follow the instruction step in the following link:

> **[HASecuritySolutions/VulnWhisperer](https://github.com/HASecuritySolutions/VulnWhisperer/wiki)**
>
> Create actionable data from your Vulnerability Scans - HASecuritySolutions/VulnWhisperer

  
But when I tried to create an index pattern called logstash-\*, it says The index pattern you've entered doesn't match any indices. You can match any of your **37 indices** , below. And the next step button is disabled. Please help me to fix it. Thank you

---

<div class="post-metadata">

**Author:** ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)\
**Post date:** [September 17, 2020, 1:15pm UTC](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889/6 "2020-09-17T13:15:45Z")

</div>

It seems like you can get better help by asking for help either in the VUlnWhisperer GH repo or the forum (if it exists) - it seems like there is some problem in the instructions you are working with.

In general the stuff you posted here looks like the data didn't get ingested correctly in the Elastic stack.

---

<div class="post-metadata">

**Author:** ![Subhadeep](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/subhadeep/32/75713_2.png) [@Subhadeep](https://discuss.elastic.co/u/Subhadeep)\
**Post date:** [September 17, 2020, 1:32pm UTC](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889/7 "2020-09-17T13:32:07Z")

</div>

Thank you for your response @flash1293. But could you please tell me that why I can see the logstash pattern when I run GET _cat/templates?v in the dev tools as follows:  
name index\_patterns order version composed\_of  
wazuh-agent [wazuh-monitoring-3.x-] 0  
logstash [logstash-vulnwhisperer-] 0  
tenant\_template [.kibana_-_\ __, .kibana\_0\*_, .kibana\_1__ , .kibana\_2 __, .kibana\_3__ , .kibana\_4 __, .kibana\_5__ , .kibana\_6 __, .kibana\_7__ , .kibana\_8 __, .kibana\_9__] 0  
wazuh [wazuh-alerts-3.x-_, wazuh-archives-3.x-\*] 0 1

But I do not see logstash-vulnwhisperer-\* in my index patterns in kibana. But I see wazuh-alerts-3.x-\* and wazuh-monitoring-3.x-\*. Please help. Thank you so much.

---

<div class="post-metadata">

**Author:** ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)\
**Post date:** [September 17, 2020, 1:33pm UTC](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889/8 "2020-09-17T13:33:57Z")

</div>

Kibana index patterns and Elasticsearch templates are two different things. It seems like in your case something created the template in Elasticsearch to ingest data, but as no data has been ingested so far, Kibana doesn't know about it

---

<div class="post-metadata">

**Author:** ![Subhadeep](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/subhadeep/32/75713_2.png) [@Subhadeep](https://discuss.elastic.co/u/Subhadeep)\
**Post date:** [September 17, 2020, 1:36pm UTC](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889/9 "2020-09-17T13:36:58Z")

</div>

Ok, thank you so much. Now, its much clear to me. Thank you so much for the explanation @flash1293

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 15, 2020, 1:37pm UTC](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889/10 "2020-10-15T13:37:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
