HI mates,
i started arcsight module to pull the data and found the index created in kibana with dashboards but none of the dashboards are accessible.When try to open the dashboard i got the error as: no matching index found :no indices match pattern arcsight-*.
I've had this issue before, not quite sure why. The solution I have always used is to replace it with the index unique ID instead. In Kibana go to Management > Index Pattern and select the arcsight-* index. Then looking in the URL, copy the part AFTER /indices/ and up to the question mark:
Go to your visualization and when it appears with the error, go down to the settings and you will see "arcsight-*" mentioned. Replace it with the UUID you just copied. Save and go back into the visualization and it should be working.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.