# No matching index found for arcsight-\* **URL:** \ **Category:** Logstash\ **Created:** [November 27, 2018, 7:12am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280 "2018-11-27T07:12:57Z")\ **Posts on this page:** 15\ **Page:** 1
**Author:** ![jagan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jagan/32/42200_2.png) [@jagan](https://discuss.elastic.co/u/jagan)\ **Post date:** [November 27, 2018, 7:12am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280/1 "2018-11-27T07:12:57Z")
HI mates, i started arcsight module to pull the data and found the index created in kibana with dashboards but none of the dashboards are accessible.When try to open the dashboard i got the error as: no matching index found :no indices match pattern arcsight-\*. please suggest me how to fix this. Thanks in advance, jagan ---
**Author:** ![ShaneP](https://avatars.discourse-cdn.com/v4/letter/s/e9bcb4/32.png) [@ShaneP](https://discuss.elastic.co/u/ShaneP)\ **Post date:** [November 27, 2018, 7:27am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280/2 "2018-11-27T07:27:13Z")
I also [icloud](https://www.icloudcentral.com/) need help with this. Need [gimp](https://gimp.software/) help ASAP. Regards, Shane. ---
**Author:** ![Eniqmatic](https://avatars.discourse-cdn.com/v4/letter/e/ea5d25/32.png) [@Eniqmatic](https://discuss.elastic.co/u/Eniqmatic)\ **Post date:** [November 27, 2018, 8:07am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280/3 "2018-11-27T08:07:15Z")
I assume your index is called arcsight-\*? ---
**Author:** ![jagan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jagan/32/42200_2.png) [@jagan](https://discuss.elastic.co/u/jagan)\ **Post date:** [November 27, 2018, 9:02am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280/4 "2018-11-27T09:02:23Z")
Thanks Lewis, Yes my index is arcsight-\* Thanks, jagan ---
**Author:** ![Eniqmatic](https://avatars.discourse-cdn.com/v4/letter/e/ea5d25/32.png) [@Eniqmatic](https://discuss.elastic.co/u/Eniqmatic)\ **Post date:** [November 27, 2018, 9:27am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280/5 "2018-11-27T09:27:09Z")
I've had this issue before, not quite sure why. The solution I have always used is to replace it with the index unique ID instead. In Kibana go to Management \> Index Pattern and select the arcsight-\* index. Then looking in the URL, copy the part AFTER /indices/ and up to the question mark: ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/5/159160ee388bfc79ae10884e71719572e6d02307.png) Go to your visualization and when it appears with the error, go down to the settings and you will see "arcsight-\*" mentioned. Replace it with the UUID you just copied. Save and go back into the visualization and it should be working. ---
**Author:** ![jagan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jagan/32/42200_2.png) [@jagan](https://discuss.elastic.co/u/jagan)\ **Post date:** [November 27, 2018, 9:43am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280/6 "2018-11-27T09:43:45Z")
HI Lewis, As stated by you i tried to find the UUID but i did't find any UUID i got only the following url:**[http://localhost:5601/app/kibana#/management/kibana/indices/arcsight-\*?\_g=()&\_a=(tab:indexedFields)](http://localhost:5601/app/kibana#/management/kibana/indices/arcsight-*?_g=()&_a=(tab:indexedFields))** but no UUID .Could you suggest me how to do that. Thanks, Jagan ---
**Author:** ![Eniqmatic](https://avatars.discourse-cdn.com/v4/letter/e/ea5d25/32.png) [@Eniqmatic](https://discuss.elastic.co/u/Eniqmatic)\ **Post date:** [November 27, 2018, 9:47am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280/7 "2018-11-27T09:47:24Z")
Interesting. If you open up the corresponding visualization, not the dashboard, what do you get? ---
**Author:** ![jagan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jagan/32/42200_2.png) [@jagan](https://discuss.elastic.co/u/jagan)\ **Post date:** [November 27, 2018, 9:58am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280/8 "2018-11-27T09:58:51Z")
![image](https://us1.discourse-cdn.com/elastic/original/3X/a/d/ada5fead5035d730fe250f77c7415388ba491a50.png) Hi Lewis , i got this (plz see the picture Regards, jagan ---
**Author:** ![Eniqmatic](https://avatars.discourse-cdn.com/v4/letter/e/ea5d25/32.png) [@Eniqmatic](https://discuss.elastic.co/u/Eniqmatic)\ **Post date:** [November 27, 2018, 10:02am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280/9 "2018-11-27T10:02:32Z")
Do you definitely have data in your index? ---
**Author:** ![jagan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jagan/32/42200_2.png) [@jagan](https://discuss.elastic.co/u/jagan)\ **Post date:** [November 27, 2018, 10:10am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280/10 "2018-11-27T10:10:05Z")
No Lewis i don't find any data(document count) when i checked with '[http://localhost:9200/\_cat/indices](http://localhost:9200/_cat/indices)' the indices. may i know the reason? Regards, Jagdish ---
**Author:** ![Eniqmatic](https://avatars.discourse-cdn.com/v4/letter/e/ea5d25/32.png) [@Eniqmatic](https://discuss.elastic.co/u/Eniqmatic)\ **Post date:** [November 27, 2018, 10:12am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280/11 "2018-11-27T10:12:24Z")
Have you setup logstash to ingest data? ---
**Author:** ![jagan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jagan/32/42200_2.png) [@jagan](https://discuss.elastic.co/u/jagan)\ **Post date:** [November 27, 2018, 10:14am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280/12 "2018-11-27T10:14:51Z")
no ..i did't setup ingest data ---
**Author:** ![Eniqmatic](https://avatars.discourse-cdn.com/v4/letter/e/ea5d25/32.png) [@Eniqmatic](https://discuss.elastic.co/u/Eniqmatic)\ **Post date:** [November 27, 2018, 10:17am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280/13 "2018-11-27T10:17:05Z")
If you have no data then there is nothing to visualize 🙂 ---
**Author:** ![jagan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jagan/32/42200_2.png) [@jagan](https://discuss.elastic.co/u/jagan)\ **Post date:** [November 27, 2018, 10:22am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280/14 "2018-11-27T10:22:00Z")
Thanks Lewis, ll try to ingest data. if i have any issues i ll be back ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 25, 2018, 10:22am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280/15 "2018-12-25T10:22:01Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.