*** SEE EDIT BELOW ***
Hey.
Since we have upgraded ELK stack to version 7.7.1 the Kibana keeps presenting error messages of "bad request" to elasticsearch when we perform index field refresh and now when we are trying to create a new index pattern.
I know for a fact that an index have time field "@timestamp", but when trying to create kibana index pattern I get this message:
"The indices which match this index pattern don't contain any time fields."
In the browser console I see the following error:
commons.bundle.js:3 GET https://HIDDEN-HOST/kibana/api/index_patterns/_fields_for_wildcard?pattern=waf-*&meta_fields=_source 400 (Bad Request)
_callee3$ @ commons.bundle.js:3
l @ kbn-ui-shared-deps.js:288
(anonymous) @ kbn-ui-shared-deps.js:288
forEach.e. @ kbn-ui-shared-deps.js:288
asyncGeneratorStep @ commons.bundle.js:3
_next @ commons.bundle.js:3
(anonymous) @ commons.bundle.js:3
(anonymous) @ commons.bundle.js:3
fetchResponse @ commons.bundle.js:3
_callee$ @ commons.bundle.js:3
l @ kbn-ui-shared-deps.js:288
(anonymous) @ kbn-ui-shared-deps.js:288
forEach.e. @ kbn-ui-shared-deps.js:288
asyncGeneratorStep @ commons.bundle.js:3
_next @ commons.bundle.js:3
Promise.then (async)
asyncGeneratorStep @ commons.bundle.js:3
_next @ commons.bundle.js:3
(anonymous) @ commons.bundle.js:3
(anonymous) @ commons.bundle.js:3
(anonymous) @ commons.bundle.js:3
_callee2$ @ commons.bundle.js:3
l @ kbn-ui-shared-deps.js:288
(anonymous) @ kbn-ui-shared-deps.js:288
forEach.e. @ kbn-ui-shared-deps.js:288
asyncGeneratorStep @ commons.bundle.js:3
_next @ commons.bundle.js:3
(anonymous) @ commons.bundle.js:3
(anonymous) @ commons.bundle.js:3
(anonymous) @ commons.bundle.js:3
_request @ data.plugin.js:6
getFieldsForWildcard @ data.plugin.js:6
fetchForWildcard @ data.plugin.js:25
_callee$ @ kibana.bundle.js:2
l @ kbn-ui-shared-deps.js:288
(anonymous) @ kbn-ui-shared-deps.js:288
forEach.e. @ kbn-ui-shared-deps.js:288
asyncGeneratorStep @ kibana.bundle.js:2
_next @ kibana.bundle.js:2
Promise.then (async)
asyncGeneratorStep @ kibana.bundle.js:2
_next @ kibana.bundle.js:2
(anonymous) @ kibana.bundle.js:2
(anonymous) @ kibana.bundle.js:2
componentDidMount @ kibana.bundle.js:2
vl @ kbn-ui-shared-deps.js:342
t.unstable_runWithPriority @ kbn-ui-shared-deps.js:350
Hi @ kbn-ui-shared-deps.js:342
yl @ kbn-ui-shared-deps.js:342
ol @ kbn-ui-shared-deps.js:342
(anonymous) @ kbn-ui-shared-deps.js:342
t.unstable_runWithPriority @ kbn-ui-shared-deps.js:350
Hi @ kbn-ui-shared-deps.js:342
Gi @ kbn-ui-shared-deps.js:342
Yi @ kbn-ui-shared-deps.js:342
se @ kbn-ui-shared-deps.js:342
An @ kbn-ui-shared-deps.js:342
commons.bundle.js:3 Detected an unhandled Promise rejection.
Error: Bad Request
data.plugin.js:6 Uncaught (in promise) Error: Bad Request
at data.plugin.js:6
*** EDIT ***
I have taken the request and tried to run it on another tab getting the same error:
https://hidden-host/kibana/api/index_patterns/_fields_for_wildcard?pattern=waf-*&meta_fields=_source
Response:
{"statusCode":400,"error":"Bad Request","message":"Bad Request"}
When I manually removed the end of the request:
&meta_fields=_source
I get the following response:
{"fields":[{"name":"@timestamp","type":"date","esTypes":["date"],"searchable":true,"aggregatable":true,"readFromDocValues":true},{"name":"@version","type":"string","esTypes":["text"],"searchable":true,"aggregatable":false,"readFromDocValues":false},{"name":"@version.keyword","type":"string","esTypes":["keyword"],"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"multi":{"parent":"@version"}}},{"name":"filename","type":"string","esTypes":["text"],"searchable":true,"aggregatable":false,"readFromDocValues":false},{"name":"filename.keyword","type":"string","esTypes":["keyword"],"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"multi":{"parent":"filename"}}},{"name":"host","type":"string","esTypes":["text"],"searchable":true,"aggregatable":false,"readFromDocValues":false},{"name":"host.keyword","type":"string","esTypes":["keyword"],"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"multi":{"parent":"host"}}},{"name":"message","type":"string","esTypes":["text"],"searchable":true,"aggregatable":false,"readFromDocValues":false},{"name":"message.keyword","type":"string","esTypes":["keyword"],"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"multi":{"parent":"message"}}},{"name":"path","type":"string","esTypes":["text"],"searchable":true,"aggregatable":false,"readFromDocValues":false},{"name":"path.keyword","type":"string","esTypes":["keyword"],"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"multi":{"parent":"path"}}},{"name":"tags","type":"string","esTypes":["text"],"searchable":true,"aggregatable":false,"readFromDocValues":false},{"name":"tags.keyword","type":"string","esTypes":["keyword"],"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"multi":{"parent":"tags"}}},{"name":"type","type":"string","esTypes":["text"],"searchable":true,"aggregatable":false,"readFromDocValues":false},{"name":"type.keyword","type":"string","esTypes":["keyword"],"searchable":true,"aggregatable":true,"readFromDocValues":true,"subType":{"multi":{"parent":"type"}}}]}
Can anyone explain why is it working without the meta fields? or how can I cause Kibana to not add this to the request?
I see no special errors on Kibana service or on the ES nodes...
*** EDIT2 ***
Tried different browsers- none work. they all have the same issue.
Please help me!
Thank you.