# Kibana index pattern not saved

**URL:** https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321
**Category:** Kibana
**Created:** [February 15, 2021, 2:12pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321 "2021-02-15T14:12:02Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![anoopkv](https://avatars.discourse-cdn.com/v4/letter/a/49beb7/32.png) [@anoopkv](https://discuss.elastic.co/u/anoopkv)
#### Post date: [February 15, 2021, 2:12pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321/1 "2021-02-15T14:12:02Z")

</div>

I have an ELK stack running on the Kubernetes cluster with security enabled. Everything is running fine and I am able to push data to an index. After logging in to Kibana as an admin user, and I to "Discover" it asks me to create an index pattern. So I have some metricbeat data, and I create a pattern and saved it. But when I go back to discover, it is prompting me to create an index pattern again!

I don't find any errors in Kibana/Elastic pods

Really appreciate any pointers

Elastisearch version: 7.10.1

---

<div class="post-metadata">

### Author: ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)
#### Post date: [February 15, 2021, 2:32pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321/2 "2021-02-15T14:32:32Z")

</div>

Hi @anoopkv ,

Do you see your index pattern in [Saved Objects management](https://www.elastic.co/guide/en/kibana/7.10/managing-saved-objects.html)? If not try to create it again, but this time open Dev Tools so that you can see what request is sent to save it and what the response is and share request/response here.

Best,  
Oleg

---

<div class="post-metadata">

### Author: ![anoopkv](https://avatars.discourse-cdn.com/v4/letter/a/49beb7/32.png) [@anoopkv](https://discuss.elastic.co/u/anoopkv)
#### Post date: [February 15, 2021, 3:16pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321/3 "2021-02-15T15:16:27Z")

</div>

Hi @azasypkin

When i go to saved objects i get error "Unable find saved objects"

> [https://localhost:5601/api/kibana/management/saved\_objects/\_find?perPage=50&page=1&fields=id&type=config&type=url&type=index-pattern&type=query&type=dashboard&type=visualization&type=map&type=lens&type=search&type=infrastructure-ui-source&type=metrics-explorer-view&type=inventory-view&type=canvas-element&type=canvas-workpad&sortField=type](https://localhost:5601/api/kibana/management/saved_objects/_find?perPage=50&page=1&fields=id&type=config&type=url&type=index-pattern&type=query&type=dashboard&type=visualization&type=map&type=lens&type=search&type=infrastructure-ui-source&type=metrics-explorer-view&type=inventory-view&type=canvas-element&type=canvas-workpad&sortField=type)

> {"statusCode":400,"error":"Bad Request","message":"all shards failed: search\_phase\_execution\_exception"}

> 1. Request URL: [https://localhost:5601/api/saved\_objects/index-pattern](https://localhost:5601/api/saved_objects/index-pattern)
> 2. Request Method: POST
> 3. Status Code: 200
> 4. Referrer Policy: strict-origin-when-cross-origin

---

<div class="post-metadata">

### Author: ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)
#### Post date: [February 15, 2021, 3:32pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321/4 "2021-02-15T15:32:09Z")

</div>

> [@anoopkv](#):
>
> {"statusCode":400,"error":"Bad Request","message":"all shards failed: search\_phase\_execution\_exception"}

It looks like you have something weird with your setup/Elasticsearch, sounds similar to this issue [Created an Index Pattern in Kibana but it's not saved - but no error either · Issue #87607 · elastic/kibana · GitHub](https://github.com/elastic/kibana/issues/87607).

Have you tried to re-create cluster maybe? Sorry don't have anything concrete in mind yet.

---

<div class="post-metadata">

### Author: ![anoopkv](https://avatars.discourse-cdn.com/v4/letter/a/49beb7/32.png) [@anoopkv](https://discuss.elastic.co/u/anoopkv)
#### Post date: [February 15, 2021, 3:47pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321/5 "2021-02-15T15:47:48Z")

</div>

I have now deleted and re-created my cluster. Deleted the associated pv in my k8s cluster  
Still no luck ☹

---

<div class="post-metadata">

### Author: ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)
#### Post date: [February 15, 2021, 3:51pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321/6 "2021-02-15T15:51:37Z")

</div>

Hmm, maybe try to enable Kibana verbose logging (`logging.verbose: true`) and restart Kibana so that logs contain everything right from the start and see if you can spot anything in there. If you don't see anything, remove any sensitive info from there and share the the file with logs here (via link to [gist.github.com](http://gist.github.com) or anything like that since you cannot attach it directly here).

---

<div class="post-metadata">

### Author: ![anoopkv](https://avatars.discourse-cdn.com/v4/letter/a/49beb7/32.png) [@anoopkv](https://discuss.elastic.co/u/anoopkv)
#### Post date: [February 15, 2021, 4:07pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321/7 "2021-02-15T16:07:56Z")

</div>

recreated kibana and now it is working. I can even see all the index patterns i have been creating earlier  
so it seems the issue was only with kibana after all.  
Thanks @azasypkin for your pointers, it was helpful 🙂

---

<div class="post-metadata">

### Author: ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)
#### Post date: [February 15, 2021, 4:09pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321/8 "2021-02-15T16:09:29Z")

</div>

Awesome, glad it's working now!

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 15, 2021, 4:10pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321/9 "2021-03-15T16:10:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
