# Kibana Not seeing Indexes **URL:** \ **Category:** Kibana\ **Created:** [April 27, 2018, 8:04am UTC](https://discuss.elastic.co/t/kibana-not-seeing-indexes/129783 "2018-04-27T08:04:20Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![L33T](https://avatars.discourse-cdn.com/v4/letter/l/dbc845/32.png) [@L33T](https://discuss.elastic.co/u/L33T)\ **Post date:** [April 27, 2018, 8:04am UTC](https://discuss.elastic.co/t/kibana-not-seeing-indexes/129783/1 "2018-04-27T08:04:20Z")
Hi, Seem to have an issue with Kibana seeing indexes properly. I have a index pattern called winlogbeat-6.2.4-\* In elastic-hq i can see the indexes winlogbeat-6.2.4-2018.04.20 for each day but when i go to discover i get: There is a problem with this saved object The index pattern associated with this object no longer exists. If you know what this error means, go ahead and fix it — otherwise click the delete button above. If i change to either winlogbeat-6.2.4-\* or winlogbeat-6.2.4 i still get the error: kibanaSavedObjectMeta.searchSourceJSON { "index": "winlogbeat-6.2.4-\*", "highlightAll": true, "version": true, "query": { "language": "lucene", "query": "computer\_name: Veeam1 AND message: Warning" }, "filter": [] } Any help would be great, i can`t seem to get my head round having the indexes working in Kibana. Cheers, ---
**Author:** ![timroes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timroes/32/19712_2.png) [@timroes](https://discuss.elastic.co/u/timroes)\ **Post date:** [April 27, 2018, 8:13am UTC](https://discuss.elastic.co/t/kibana-not-seeing-indexes/129783/2 "2018-04-27T08:13:49Z")
It seems like your index pattern definition inside Kibana is vanished (for whatever reason). Please use the button provided in the UI or head to the index pattern page in management to recreate the index pattern. For other saved objects (dashboard, visualizations, etc.) to continue working, you will need to reuse the same ID, that the old index pattern had (which should work automatically if you use the link provided in the UI). Cheers, Tim ---
**Author:** ![L33T](https://avatars.discourse-cdn.com/v4/letter/l/dbc845/32.png) [@L33T](https://discuss.elastic.co/u/L33T)\ **Post date:** [April 27, 2018, 8:40am UTC](https://discuss.elastic.co/t/kibana-not-seeing-indexes/129783/3 "2018-04-27T08:40:17Z")
Hi, Thanks for the super quick reply. Which button (sorry i`m starting out still). When re-creating the index pattern do i use winlogbeat-\* as i seem to have indexes with winlogbeat- and winlogbeat-6.2.4: | winlogbeat-2018.04.24 | 248.1k | 5 | 1 | 240.3 MB | 4.6 MB | | --- | --- | --- | --- | --- | --- | | winlogbeat-2018.04.25 | 1.6m | 5 | 1 | 1.3 GB | 25.5 MB | | winlogbeat-2018.04.26 | 53.3k | 5 | 1 | 50.3 MB | 991.4 KB | | winlogbeat-6.2.4-2018.04.20 | 4.1k | 5 | 1 | 5.5 MB | 76.6 KB | | winlogbeat-6.2.4-2018.04.21 | 143 | 5 | 1 | 229.7 KB | 6.3 KB | Also how do i find the original ID, or the link? regards, ---
**Author:** ![timroes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timroes/32/19712_2.png) [@timroes](https://discuss.elastic.co/u/timroes)\ **Post date:** [April 27, 2018, 9:05am UTC](https://discuss.elastic.co/t/kibana-not-seeing-indexes/129783/4 "2018-04-27T09:05:34Z")
Oh sorry I thought you were getting a different error message. Yeah in that case I think you just need to recreate the index pattern and there is no "original ID", which most likely also means that you cannot reuse existing dashboards etc. Maybe if you are using beats, you could try recreating all those dashboard using the appropriate beats command. Otherwise I think you want to add `winlogbeat-*` as index pattern, if you want to have access to all the data, with `winlogbeat-6.2.4-*` you would only get access to the indexes from 2018-04-20 and 2018-04-21 and not the newer ones. Cheers, Tim ---
**Author:** ![L33T](https://avatars.discourse-cdn.com/v4/letter/l/dbc845/32.png) [@L33T](https://discuss.elastic.co/u/L33T)\ **Post date:** [April 27, 2018, 9:59am UTC](https://discuss.elastic.co/t/kibana-not-seeing-indexes/129783/5 "2018-04-27T09:59:36Z")
Hi, Ok i have performed the following: Deleted all indexes in elastic, i`m going to start a fresh with new data. Deleted all existing index patterns in kibana Created new index pattern called winlogbeat-\* Removed all data from my second node, restarted elastic service, i can see that is replicating Deleted all dashboards Deleted all visualisations Deleted all searches i had So next do i just need to ensure all my beats agents are restarted and then run the setup kibana to re-create the dashboards and visualisations? regards, ---
**Author:** ![timroes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timroes/32/19712_2.png) [@timroes](https://discuss.elastic.co/u/timroes)\ **Post date:** [April 27, 2018, 10:01am UTC](https://discuss.elastic.co/t/kibana-not-seeing-indexes/129783/6 "2018-04-27T10:01:00Z")
I think you should still delete that index pattern in Kibana, but besides that everything should be fine. The beats setup should setup everything correctly for you if you are using a fresh installation (no dashboards, indexex, etc.) Cheers, Tim ---
**Author:** ![L33T](https://avatars.discourse-cdn.com/v4/letter/l/dbc845/32.png) [@L33T](https://discuss.elastic.co/u/L33T)\ **Post date:** [April 27, 2018, 10:25am UTC](https://discuss.elastic.co/t/kibana-not-seeing-indexes/129783/7 "2018-04-27T10:25:10Z")
Sure 🙂 I have a working dashboard so i can see event types coming in which is good to see! I have updated the winlogbeat.yml on each host to talk directly to elastic instead of logstash, is their any benefit to using logstash instead? regards, ---
**Author:** ![timroes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timroes/32/19712_2.png) [@timroes](https://discuss.elastic.co/u/timroes)\ **Post date:** [April 27, 2018, 10:26am UTC](https://discuss.elastic.co/t/kibana-not-seeing-indexes/129783/8 "2018-04-27T10:26:20Z")
I think you should ask this questions rather in the Beats subforum, for proper answers. I could move the topic there, but I think you would get more attention if you just open a new question there (since it doesn't already show that it has several answers). Would that be okay for you? Cheers, Tim ---
**Author:** ![L33T](https://avatars.discourse-cdn.com/v4/letter/l/dbc845/32.png) [@L33T](https://discuss.elastic.co/u/L33T)\ **Post date:** [April 27, 2018, 10:37am UTC](https://discuss.elastic.co/t/kibana-not-seeing-indexes/129783/9 "2018-04-27T10:37:31Z")
I will open a new one 🙂 Class this as resolved and i appreciate your time on this 🙂 Regards, ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 25, 2018, 10:37am UTC](https://discuss.elastic.co/t/kibana-not-seeing-indexes/129783/10 "2018-05-25T10:37:37Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.