Kibana dashboards disapper after elastic restart and new cert creation

Hello Team,

We are using elasticsearch 7.11.2 and Kibana version 7.11.2
Our older self signed certificate expired today. (after 90d)
We created again following steps given in - Set up basic security for the Elastic Stack plus secured HTTPS traffic | Elasticsearch Guide [7.13] | Elastic
After restarting kibana and elasticsearch we did not find any of the dashboards , visualizations or the kibana alerts that we had defined earlier

a. Is this because of the creation of certificate?
b. Is there a way to extend the expiry time in the existing certificate without creating a new one.

Thanks and Regards,

@Bhavani_Ananth there could be a few things going on here. First you should check if your dashboards and other related saved objects are still in your index.

Try a GET /_cat/indices/.kibana?v and check that the doc_count shows the number of saved objects you expect to see.

If those are all still there, you might need to check the roles and other auth-related settings.

Thanks @cheiligers
There were no documents in .kibana index. In fact even the spaces that we had created were deleted.We are using basic authentication and the ssl between kibana and elasticsearch.

We created everything anew.
Only the metric, filebeat and heartbeat data was there.
Is it because of the new certificate and the restart of the server and kibana.
Thanks and regards

@Bhavani_Ananth when you say

We created everything anew.

do you mean you recreated the entire deployment? If so, I'm not sure what you mean by

In fact even the spaces that we had created were deleted.

You should be able to recreate the original cluster state by restoring a snapshot of your previous cluster (see the snapshot-restore docs).

The other option to "reinstate" your saved objects is to import them from an export of the older cluster (if that is still around).

I really hope you have a snapshot before all the changes!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.