Kibana show error index pattern

my problem with kibana is error line in top up the web page look like this:

what is the problem?
and in addition i am new in ELK ,

HI ,
Can you plz share which version of ES and Kibana. Also, the ES and Kibana logs would help. Is this from a previous Kibana set up? What does your .kibana mapping look like?


have you deleted some other index which was default one?

hi thanks for your response and my kibana vertsion is: 6.2.2,
"name" : "ouzMqHk",
"cluster_name" : "elasticsearch",
"cluster_uuid" : "wAHHVuTaQou1XRARwsvRoA",
"version" : {
"number" : "6.2.2",
"build_hash" : "10b1edd",
"build_date" : "2018-02-16T19:01:30.685723Z",
"build_snapshot" : false,
"lucene_version" : "7.2.1",
"minimum_wire_compatibility_version" : "5.6.0",
"minimum_index_compatibility_version" : "5.0.0"
and it is not from previous Kibana set up.
for your last question , i do not really know what is your meaning.

no .actually i delete index pattern and build a new one but the problem still remaind

You can check .kibana index mapping as below on Dev Tools tab
GET .kibana/_mapping

are you able to see any error on kibana logs file ?

thanks for your response and i checked kibana.stderr and it was empty

what i should look for in .kibana/_mapping?

I am not sure about .kibana mapping
@rashmi can help you more on this I guess !

kibana.logs file is there as well right ?
when you open kibana in browser what is shown in kibana logs in backendd, see if relevant info is there.

Also below post could help more.

Is not a configured pattern ID. Using the default index pattern

Index patterns get a unique id generated for them when they are created. If you create an index pattern and then create saved searches, or visualization based on that index pattern, and then delete the index pattern, then those saved searches and visualizations won't work even if you create an index pattern with the same name because the unique id is different.

But you can fix things. If you copy that uuid from the error message (the one that starts with 68b, then go to Management > Index Patterns, and create a new index pattern (maybe delete the old one first if you haven't saved new searches or visualizations based on it).
When you get to step 2, clicked the Advanced link and paste in that uuid from the error message. That should fix any saved searches or visualizations based on it.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.