# Kibana redirect to page: Select your space after a day, all data is reset. (ver: 7.8.0) **URL:** \ **Category:** Kibana\ **Created:** [August 21, 2020, 10:37am UTC](https://discuss.elastic.co/t/kibana-redirect-to-page-select-your-space-after-a-day-all-data-is-reset-ver-7-8-0/245908 "2020-08-21T10:37:53Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![lucky\_luke15190](https://avatars.discourse-cdn.com/v4/letter/l/eada6e/32.png) [@lucky\_luke15190](https://discuss.elastic.co/u/lucky_luke15190)\ **Post date:** [August 21, 2020, 10:37am UTC](https://discuss.elastic.co/t/kibana-redirect-to-page-select-your-space-after-a-day-all-data-is-reset-ver-7-8-0/245908/1 "2020-08-21T10:37:53Z")
I have built kibana with elasticsearch and filebeat, it's running well with filebeat default index, own dashboard. After 1 day, it redirect to page: Select your space, no spaces match search criteria. This can be fixed after I restart kibana and elasticsearch but all data has gone. ![kibana error](https://us1.discourse-cdn.com/elastic/original/3X/8/0/8065fe741f3e9706c27ed83de2b8c6f78b81bf79.jpeg) I do research and people said .kibana has been deleted but I checked and it's still there in the server. After restarting service, it created index: .kibana\_2 and .kibana\_3 to work. ILM: "max\_age" : "30d" should not make effect to this issue. ```auto [.kibana_task_manager_1] creating index, cause [api], templates [], shards [1]/[1], mappings [_doc] [.kibana_2] creating index, cause [api], templates [], shards [1]/[1], mappings [_doc] [.kibana_1] creating index, cause [api], templates [], shards [1]/[1], mappings [_doc] ``` ---
**Author:** ![lucky\_luke15190](https://avatars.discourse-cdn.com/v4/letter/l/eada6e/32.png) [@lucky\_luke15190](https://discuss.elastic.co/u/lucky_luke15190)\ **Post date:** [August 24, 2020, 3:25am UTC](https://discuss.elastic.co/t/kibana-redirect-to-page-select-your-space-after-a-day-all-data-is-reset-ver-7-8-0/245908/2 "2020-08-24T03:25:48Z")
My full log (it's cleared everyday) ```auto [2020-08-24T01:30:00,006][INFO][o.e.x.s.SnapshotRetentionTask] [kibana] starting SLM retention snapshot cleanup task [2020-08-24T01:30:00,009][INFO][o.e.x.s.SnapshotRetentionTask] [kibana] there are no repositories to fetch, SLM retention snapshot cleanup task complete [2020-08-24T02:10:00,000][INFO][o.e.x.m.MlDailyMaintenanceService] [kibana] triggering scheduled [ML] maintenance tasks [2020-08-24T02:10:00,001][INFO][o.e.x.m.a.TransportDeleteExpiredDataAction] [kibana] Deleting expired data [2020-08-24T02:10:00,001][INFO][o.e.x.m.a.TransportDeleteExpiredDataAction] [kibana] Completed deletion of expired ML data [2020-08-24T02:10:00,002][INFO][o.e.x.m.MlDailyMaintenanceService] [kibana] Successfully completed [ML] maintenance tasks [2020-08-24T02:53:35,221][INFO][o.e.c.m.MetadataCreateIndexService] [kibana] [.kibana] creating index, cause [auto(bulk api)], templates [], shards [1]/[1], mappings [] [2020-08-24T02:53:35,427][INFO][o.e.c.m.MetadataMappingService] [kibana] [.kibana/_NH4oEceQlWNy3hPVv3SDg] create_mapping [_doc] [2020-08-24T02:53:35,550][INFO][o.e.c.r.a.AllocationService] [kibana] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.kibana][0]]]). [2020-08-24T02:53:47,101][INFO][o.e.c.m.MetadataMappingService] [kibana] [.kibana/_NH4oEceQlWNy3hPVv3SDg] update_mapping [_doc] [2020-08-24T02:53:47,160][INFO][o.e.c.m.MetadataMappingService] [kibana] [.kibana/_NH4oEceQlWNy3hPVv3SDg] update_mapping [_doc] [2020-08-24T02:54:45,929][INFO][o.e.c.m.MetadataMappingService] [kibana] [.kibana/_NH4oEceQlWNy3hPVv3SDg] update_mapping [_doc] ``` ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [August 24, 2020, 4:21am UTC](https://discuss.elastic.co/t/kibana-redirect-to-page-select-your-space-after-a-day-all-data-is-reset-ver-7-8-0/245908/3 "2020-08-24T04:21:58Z")
Do you have ILM applied to the `.kibana` index/alias? ---
**Author:** ![lucky\_luke15190](https://avatars.discourse-cdn.com/v4/letter/l/eada6e/32.png) [@lucky\_luke15190](https://discuss.elastic.co/u/lucky_luke15190)\ **Post date:** [August 24, 2020, 8:06am UTC](https://discuss.elastic.co/t/kibana-redirect-to-page-select-your-space-after-a-day-all-data-is-reset-ver-7-8-0/245908/4 "2020-08-24T08:06:24Z")
Thanks Warkolm for taking a look, I leave ILM as default, here's output of: GET \_ilm/policy GET \_ilm/policy/ ```auto { "ilm-history-ilm-policy" : { "version" : 1, "modified_date" : "2020-08-07T10:51:48.002Z", "policy" : { "phases" : { "hot" : { "min_age" : "0ms", "actions" : { "rollover" : { "max_size" : "50gb", "max_age" : "30d" } } }, "delete" : { "min_age" : "90d", "actions" : { "delete" : { "delete_searchable_snapshot" : true } } } } } }, "watch-history-ilm-policy" : { "version" : 1, "modified_date" : "2020-08-07T10:51:47.851Z", "policy" : { "phases" : { "delete" : { "min_age" : "7d", "actions" : { "delete" : { "delete_searchable_snapshot" : true } } } } } }, "kibana-event-log-policy" : { "version" : 1, "modified_date" : "2020-08-07T11:37:16.312Z", "policy" : { "phases" : { "hot" : { "min_age" : "0ms", "actions" : { "rollover" : { "max_size" : "50gb", "max_age" : "30d" } } }, "delete" : { "min_age" : "90d", "actions" : { "delete" : { "delete_searchable_snapshot" : true } } } } } }, "ml-size-based-ilm-policy" : { "version" : 1, "modified_date" : "2020-08-07T10:51:47.933Z", "policy" : { "phases" : { "hot" : { "min_age" : "0ms", "actions" : { "rollover" : { "max_size" : "50gb" } } } } } }, "filebeat" : { "version" : 1, "modified_date" : "2020-08-07T10:56:27.859Z", "policy" : { "phases" : { "hot" : { "min_age" : "0ms", "actions" : { "rollover" : { "max_size" : "50gb", "max_age" : "30d" } } } } } }, "slm-history-ilm-policy" : { "version" : 1, "modified_date" : "2020-08-07T10:51:48.047Z", "policy" : { "phases" : { "hot" : { "min_age" : "0ms", "actions" : { "rollover" : { "max_size" : "50gb", "max_age" : "30d" } } }, "delete" : { "min_age" : "90d", "actions" : { "delete" : { "delete_searchable_snapshot" : true } } } } } } } ``` Another thing, the index list has a lot of \*\*\*-meow besides of filebeat index, may I know are they default of kibana or someone has attacked it. ![indexmgt](https://us1.discourse-cdn.com/elastic/original/3X/a/f/afc59744086e630a6516786d20543c04839af622.jpeg) ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [August 24, 2020, 8:22am UTC](https://discuss.elastic.co/t/kibana-redirect-to-page-select-your-space-after-a-day-all-data-is-reset-ver-7-8-0/245908/5 "2020-08-24T08:22:41Z")
> [@lucky\_luke15190](#): > > Another thing, the index list has a lot of \*\*\*-meow besides of filebeat index, may I know are they default of kibana or someone has attacked it. Ahh, that's your issue. Please see [Some indexes have been deleted, now I see indexes called meow?](https://discuss.elastic.co/t/some-indexes-have-been-deleted-now-i-see-indexes-called-meow/242731) ---
**Author:** ![lucky\_luke15190](https://avatars.discourse-cdn.com/v4/letter/l/eada6e/32.png) [@lucky\_luke15190](https://discuss.elastic.co/u/lucky_luke15190)\ **Post date:** [September 21, 2020, 3:59am UTC](https://discuss.elastic.co/t/kibana-redirect-to-page-select-your-space-after-a-day-all-data-is-reset-ver-7-8-0/245908/6 "2020-09-21T03:59:50Z")
I'm going to rebuild the kibana and will update you the result Warkolm, thank you. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 19, 2020, 4:00am UTC](https://discuss.elastic.co/t/kibana-redirect-to-page-select-your-space-after-a-day-all-data-is-reset-ver-7-8-0/245908/7 "2020-10-19T04:00:00Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.