# Kibana cannot locate index pattern osquery.result\* for the filebeat-osquery combination

**URL:** <https://discuss.elastic.co/t/kibana-cannot-locate-index-pattern-osquery-result-for-the-filebeat-osquery-combination/229770>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [April 25, 2020, 2:57pm UTC](https://discuss.elastic.co/t/kibana-cannot-locate-index-pattern-osquery-result-for-the-filebeat-osquery-combination/229770 "2020-04-25T14:57:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gernot\_Schmied](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gernot_schmied/32/67114_2.png) [@Gernot\_Schmied](https://discuss.elastic.co/u/Gernot_Schmied)\
**Post date:** [April 25, 2020, 2:57pm UTC](https://discuss.elastic.co/t/kibana-cannot-locate-index-pattern-osquery-result-for-the-filebeat-osquery-combination/229770/1 "2020-04-25T14:57:37Z")

</div>

Hi,

after filebeat and osquery setup data is present in the log-files and received from the Filebeat `osquery` module. However, I do not see any osquery.result\* index pattern at all. Just activated the osquery module, nothing else.

Kibana dashboard error Message: Could not locate that index-pattern-field (id: osquery.result.columns.platform\_like)

PS: "filebeat setup -e" does neither create an index pattern for osquery nor suricata enabled modules!

Any advise? How can I get or create the missing index pattern to make this work?

Regards, Gernot

---

<div class="post-metadata">

**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\
**Post date:** [April 27, 2020, 2:44pm UTC](https://discuss.elastic.co/t/kibana-cannot-locate-index-pattern-osquery-result-for-the-filebeat-osquery-combination/229770/2 "2020-04-27T14:44:05Z")

</div>

What is your Filebeat version? Could you also share your configuration and debug logs?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 25, 2020, 2:44pm UTC](https://discuss.elastic.co/t/kibana-cannot-locate-index-pattern-osquery-result-for-the-filebeat-osquery-combination/229770/3 "2020-05-25T14:44:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.