Kibana don't find index id

Elastic Stack Kibana
1

I added a new index and I can see the data of the corresponding index in elasticsearch. in the Kibana->Management -> Kibana create a index pattern. but in discover ,Retrieving an error in the kibana interface。

the error is:

Discover: "899fc620-a9e3-11e8-b219-cfaf1c602ea4" is not a configured pattern ID. Using the default index pattern: "rabbitmq*" (589a94b0-9ad4-11e8-87f1-13e78edda3f6)

The index is new. And I tried other hosts and the same problem occurred. The version is 6.3.0, which has not appeared before.

2

It looks like you're trying to load an old index pattern that no longer exists. Are you trying to load an old saved search, or perhaps visiting kibana via an old bookmark?

3

This is a brand new index that has never been created before. i can search the 589a94b0-9ad4-11e8-87f1-13e78edda3f6 data, but no find the 899fc620-a9e3-11e8-b219-cfaf1c602ea4 data.

4

As Matt said above, the error indicates that you are attempting to access an index pattern that no longer exists. Can you share what your configured index patterns are?

5

@ Bill_McConaghy

The configer setting is :

input {
  udp {
    port => 5114
    type => "log"
  }
  tcp {
    port => 5114
    type => "log"
  }

  rabbitmq {
    host => "192.168.33.29"
    port => 5672
    user => "guest"
    password => "guest"
    ssl => false
    queue => 'center_probe_to_ztms'
    exchange => "center_probe_to_ztms"

    durable => true
    codec => "json"
    heartbeat => 5
    subscription_retry_interval_seconds => 5

    type => "topav"
  }
}

filter {
  if[type] == "topav" {
    kv {
      source => "message"
      field_split => ","
      value_split => ":"
    }
  } else {
    kv {
      source => "message"
      field_split => " ?"
      value_split => "="
    }
  }

  if[type] == "topav" {
    geoip {
      source => "client_ip"
      target => "geoip"
      database => "/opt/maps/GeoLite2-City-gaode.mmdb"
      add_field => [ "[geoip][coordinates]", "%{[geoip][longitude]}" ] 
      add_field => [ "[geoip][coordinates]", "%{[geoip][latitude]}" ] 
    }
  }
    
  mutate {
    add_field => { "show" => "This Map is the test Map" }
    rename => { "[host][name]" => "host" }
    convert => [ "[geoip][coordinates]", "float" ]
  }


  if[type] == "topav" {
    date {
      match => ["time","yyyy-MM-dd HH:mm:ss,SSS","UNIX"]
      target => "@timestamp"
      locale => "cn"
    }
  } else if[type] == "syslog" {
    date {
      match => ["time","yyyy-MM-dd HH:mm:ss,SSS","ISO8601"]
      target => "@timestamp"
      locale => "cn"
    }  
  } else {
    date {
      match => [ "timestamp" , "dd/MMM/yyyy:HH:mm:ss Z" ]
    }
  }  
}

output {
  if[type] == "log" {     
    elasticsearch { 
      hosts => ["localhost"]
      index => "topav"
      document_type => "topav"
    }
  }    
  if[type] == "topav" {
    elasticsearch { 
      hosts => ["localhost"]
      index => "rabbitmq"
      document_type => "topav"
    }
  }

  stdout { codec => rubydebug }
}

The error occurred on the udp input，However, it has just returned to normal. And I have not changed anything.

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.