# Kibana imported filebeat script complains in elasticsearch:

**URL:** <https://discuss.elastic.co/t/kibana-imported-filebeat-script-complains-in-elasticsearch/95065>\
**Category:** Kibana\
**Created:** [July 30, 2017, 7:43am UTC](https://discuss.elastic.co/t/kibana-imported-filebeat-script-complains-in-elasticsearch/95065 "2017-07-30T07:43:48Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![hsafe](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hsafe/32/19710_2.png) [@hsafe](https://discuss.elastic.co/u/hsafe)\
**Post date:** [July 30, 2017, 7:43am UTC](https://discuss.elastic.co/t/kibana-imported-filebeat-script-complains-in-elasticsearch/95065/1 "2017-07-30T07:43:48Z")

</div>

Hi all,  
Let me first mention the error I receive:

Error: No matching indices found: [index\_not\_found\_exception] no such index, with { resource.type="index\_or\_alias" & resource.id="filebeat-_" & index\_uuid="na" & index="filebeat-_" }

I have successfully used this source for installing and configuring elk stack from:

> **[How To Install Elasticsearch, Logstash, and Kibana (ELK Stack) on CentOS 7 |...](https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-centos-7)**
>
> In this tutorial, we will go over the installation of the Elasticsearch ELK Stack on CentOS 7—that is, Elasticsearch 2.1.x, Logstash 2.1.x, and Kibana 4.3.x. We will also show you how to configure it to gather and visualize the syslogs of your...

However in my last try with the latest stack releases i.e : {kibana,elasticsearch,logstach}5.4.3 using the same steps as above link and upon importing beats dashboard (beats-dashboards-1.1.0) from the url: [https://goo.gl/mtAj1H](https://goo.gl/mtAj1H)  
the error occurs. My assumption is that there is a change in elasticsearch from 2.x to 5.4.x but can't get my head around it and it already frustrated me as am quite a novice in elasticsearch .  
Can somebody please help? Your suggestions and helps are much appreciated.

* * *

---

<div class="post-metadata">

**Author:** ![weltenwort](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weltenwort/32/53885_2.png) [@weltenwort](https://discuss.elastic.co/u/weltenwort)\
**Post date:** [July 31, 2017, 12:06pm UTC](https://discuss.elastic.co/t/kibana-imported-filebeat-script-complains-in-elasticsearch/95065/2 "2017-07-31T12:06:58Z")

</div>

Hi @hsafe,

since we prefer to move fast with our features, many changes have been made since Elasticsearch 2.x and Kibana 4.x. Since 5.0 we have decided to unify the versioning of the whole stack, meaning that we release compatible versions of all products simultaneously. Essentially that means that the versions of Elasticsearch, Kibana, X-Pack, Logstash and Beats should match. There are some exceptions for Beats and Logstash, which you can see in [the support matrix](https://www.elastic.co/support/matrix#show_compatibility). I would recommend to always start with the latest version of all products to ensure compatibility and make future updates as seamless as possible.

---

<div class="post-metadata">

**Author:** ![hsafe](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hsafe/32/19710_2.png) [@hsafe](https://discuss.elastic.co/u/hsafe)\
**Post date:** [August 1, 2017, 6:25am UTC](https://discuss.elastic.co/t/kibana-imported-filebeat-script-complains-in-elasticsearch/95065/3 "2017-08-01T06:25:09Z")

</div>

Hi weltenwort

As in the body of the issue I stated my approach has been compliant to es new rules and have done it by  
{kibana,elasticsearch,logstach}5.4.3 version...Actually the same goes wit the filebeat 5.4.3

---

<div class="post-metadata">

**Author:** ![weltenwort](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weltenwort/32/53885_2.png) [@weltenwort](https://discuss.elastic.co/u/weltenwort)\
**Post date:** [August 1, 2017, 8:48am UTC](https://discuss.elastic.co/t/kibana-imported-filebeat-script-complains-in-elasticsearch/95065/4 "2017-08-01T08:48:32Z")

</div>

Sorry to have misunderstood you. From your post it looked like you were trying to import the Beats 1.1.0 dashboards into Kibana 5.4.3. So to make sure we are talking about the same thing: You get the aforementioned error when importing the Filebeat 5.4.3 index pattern via `./scripts/import_dashboards -only-index` as shown in [the documenteation](https://www.elastic.co/guide/en/beats/filebeat/5.4/filebeat-index-pattern.html)?

---

<div class="post-metadata">

**Author:** ![hsafe](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hsafe/32/19710_2.png) [@hsafe](https://discuss.elastic.co/u/hsafe)\
**Post date:** [August 1, 2017, 11:35am UTC](https://discuss.elastic.co/t/kibana-imported-filebeat-script-complains-in-elasticsearch/95065/5 "2017-08-01T11:35:03Z")

</div>

Hello weltenwort,

Sorry, maybe it is my bad...anyways that is where my process differed and not until the link you sent I was aware of that...  
Anyway trying to follow the link steps trying to import filebeat index pattern , and again I failed ☹ Actually I managed to get the **beats-dashboards-5.4.3** from the address provides in the steps but my trouble was where I could not find the import\_dashboards script. I wonder how to do that to get the filebeat index pattern to the kibana

---

<div class="post-metadata">

**Author:** ![weltenwort](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weltenwort/32/53885_2.png) [@weltenwort](https://discuss.elastic.co/u/weltenwort)\
**Post date:** [August 1, 2017, 12:01pm UTC](https://discuss.elastic.co/t/kibana-imported-filebeat-script-complains-in-elasticsearch/95065/6 "2017-08-01T12:01:04Z")

</div>

The `import_dashboards` script should be in the `scripts` subdirectory of the Filebeat directory. To import the Filebeat index pattern running `./scripts/import_dashboards -only-index` from the Filebeat directory should be enough. Filebeat should go ahead and download the files it needs automatically.

---

<div class="post-metadata">

**Author:** ![hsafe](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hsafe/32/19710_2.png) [@hsafe](https://discuss.elastic.co/u/hsafe)\
**Post date:** [August 1, 2017, 12:52pm UTC](https://discuss.elastic.co/t/kibana-imported-filebeat-script-complains-in-elasticsearch/95065/7 "2017-08-01T12:52:22Z")

</div>

Hi again,  
You made my day...it is now imported and correctly showing...I am grateful  
For the sake of the records I could not find the script as I never had the filebeat package installed on the server itself...after your hint and upon installing filebeat and doing a locate import\_dashboards I foud it ...

Thanks again

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 29, 2017, 12:52pm UTC](https://discuss.elastic.co/t/kibana-imported-filebeat-script-complains-in-elasticsearch/95065/8 "2017-08-29T12:52:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
