# Select your space You can change your space at anytime{ No spaces match search criteria }

**URL:** <https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565>\
**Category:** Kibana\
**Created:** [June 18, 2020, 5:47am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565 "2020-06-18T05:47:07Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gopi\_mdvk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gopi_mdvk/32/48441_2.png) [@Gopi\_mdvk](https://discuss.elastic.co/u/Gopi_mdvk)\
**Post date:** [June 18, 2020, 5:47am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/1 "2020-06-18T05:47:07Z")

</div>

Hi team,

I am using elk 7.x and i am getting a strange error that "No spaces match search criteria".I am getting this error cople of times.my kibana was working till yesterday but when i try to open i getting the above error.also all the visualizations and dashboards will be gone if i restart the kibana after that it will work fine couple of more day again same issue will arrive.  
I didn't find any kibana logs also,i am attaching the screenshopt of what i am getting can anyone help me out this why it is happening?

thanks in advance

 ![Screenshot from 2020-06-18 11-15-59](https://us1.discourse-cdn.com/elastic/original/3X/9/a/9a06c35e7414fc2ab7a7641c3517e738c05042cd.png)

---

<div class="post-metadata">

**Author:** ![Gopi\_mdvk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gopi_mdvk/32/48441_2.png) [@Gopi\_mdvk](https://discuss.elastic.co/u/Gopi_mdvk)\
**Post date:** [June 25, 2020, 11:29am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/2 "2020-06-25T11:29:21Z")

</div>

Team can anyone help out on this I am not getting why i got this error

---

<div class="post-metadata">

**Author:** ![AlanMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alanmark/32/56292_2.png) [@AlanMark](https://discuss.elastic.co/u/AlanMark)\
**Post date:** [June 29, 2020, 6:31am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/3 "2020-06-29T06:31:52Z")

</div>

Im seeing this as well.

---

<div class="post-metadata">

**Author:** ![charan\_syba](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/charan_syba/32/72728_2.png) [@charan\_syba](https://discuss.elastic.co/u/charan_syba)\
**Post date:** [July 24, 2020, 1:43am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/4 "2020-07-24T01:43:03Z")

</div>

Hi Team, even I'm also started facing the same problem from past 5 days.  
Everyday I will get that error and I need to restart kibana, but it's a very serious problem because I'm loosing all the imported data sources, visualizations and dashboards.  
Can anyone please help on this ?

---

<div class="post-metadata">

**Author:** ![nitin.smartech](https://avatars.discourse-cdn.com/v4/letter/n/82dd89/32.png) [@nitin.smartech](https://discuss.elastic.co/u/nitin.smartech)\
**Post date:** [July 24, 2020, 5:22am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/5 "2020-07-24T05:22:34Z")

</div>

I am also facing same problem from past 4 days

When I restart kibana then it deletes all my existing indexes as well! and it has automatically created some random indexes (more then 40).

It happens every day for me! I have tried to re install the but inspite of it issue is not resolved!

please help! it causes data loss.

---

<div class="post-metadata">

**Author:** ![kwonghung-YIP](https://avatars.discourse-cdn.com/v4/letter/k/d26b3c/32.png) [@kwonghung-YIP](https://discuss.elastic.co/u/kwonghung-YIP)\
**Post date:** [July 24, 2020, 8:10am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/6 "2020-07-24T08:10:25Z")

</div>

Try to create the API by calling the API.

[https://www.elastic.co/guide/en/kibana/master/spaces-api-post.html](https://www.elastic.co/guide/en/kibana/master/spaces-api-post.html)

---

<div class="post-metadata">

**Author:** ![charan\_syba](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/charan_syba/32/72728_2.png) [@charan\_syba](https://discuss.elastic.co/u/charan_syba)\
**Post date:** [July 24, 2020, 10:16am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/7 "2020-07-24T10:16:18Z")

</div>

Thanks for the quick response kwonghung.  
Yesterday morning I have tried the same way, instead of using the default space I have created my own space and created dashboard in that space.  
But, today morning again it has started showing the same error.

---

<div class="post-metadata">

**Author:** ![nitin.smartech](https://avatars.discourse-cdn.com/v4/letter/n/82dd89/32.png) [@nitin.smartech](https://discuss.elastic.co/u/nitin.smartech)\
**Post date:** [July 27, 2020, 4:36am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/8 "2020-07-27T04:36:50Z")

</div>

same for me! I followed the steps for create space ! Today Again I am getting same error!

---

<div class="post-metadata">

**Author:** ![charan\_syba](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/charan_syba/32/72728_2.png) [@charan\_syba](https://discuss.elastic.co/u/charan_syba)\
**Post date:** [July 27, 2020, 5:08am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/9 "2020-07-27T05:08:20Z")

</div>

Yes, still the issue is not resolved. I'm facing the same error.

---

<div class="post-metadata">

**Author:** ![nitin.smartech](https://avatars.discourse-cdn.com/v4/letter/n/82dd89/32.png) [@nitin.smartech](https://discuss.elastic.co/u/nitin.smartech)\
**Post date:** [July 27, 2020, 5:14am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/10 "2020-07-27T05:14:57Z")

</div>

@Gopi_mdvk have you got any solution??

because of it we are getting data lost! and also it creates random indexes.

![screenshot-64.225.47.149_5601-2020.07.27-10_43_28](https://us1.discourse-cdn.com/elastic/original/3X/a/7/a735c3ea1e918abda254f59a6181a21d468465e5.png)

---

<div class="post-metadata">

**Author:** ![ClubberLang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/clubberlang/32/72169_2.png) [@ClubberLang](https://discuss.elastic.co/u/ClubberLang)\
**Post date:** [July 27, 2020, 6:48am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/11 "2020-07-27T06:48:59Z")

</div>

Same here, what is strange:  
1 - I only have this since 2 days  
2 - I have downgrade to version 7.7.0 and this morning ... the problem is back  
3 - I never got such issue previously, then this Friday this problem occur for the first time  
4 - A clean reinstall does not help  
5 - I have shutdown kibana & logstash, after a few hours Elastic is down again!

So, it is definitively an Elastic issue !

It looks like I've been hacked, I don't understand how it is possible! Mainly because for weeks I got no issue, here I can reproduce it several times per day!

What is strange too, is that a lot of peoples have the same issue at the same time (approx) !

Also, see my ES log, does someone is trying to DELETE my index, who/how ?

```
[5va5w](https://swarmpit.socloze.com/#/tasks/5va5wgbuj58h806g5t7d5q4kp?log=1) {"type": "server", "timestamp": "2020-07-27T08:56:00,332Z", "level": "INFO", "component": "o.e.c.m.MetadataDeleteIndexService", "cluster.name": "docker-cluster-es01", "node.name": "es01", "message": "[posts_index/jcIQ4K29SqO0HIGjMt1H7g] deleting index", "cluster.uuid": "WKZ_vTKIQ4GkIPn1KIx7Gw", "node.id": "T1w-1R6LRoqnVfbnF67z-Q" }

[5va5w](https://swarmpit.socloze.com/#/tasks/5va5wgbuj58h806g5t7d5q4kp?log=1) {"type": "server", "timestamp": "2020-07-27T08:56:01,007Z", "level": "INFO", "component": "o.e.c.m.MetadataDeleteIndexService", "cluster.name": "docker-cluster-es01", "node.name": "es01", "message": "[stores_index/2oPaTL4kTVGwCf1tTDWguw] deleting index", "cluster.uuid": "WKZ_vTKIQ4GkIPn1KIx7Gw", "node.id": "T1w-1R6LRoqnVfbnF67z-Q" }

[5va5w](https://swarmpit.socloze.com/#/tasks/5va5wgbuj58h806g5t7d5q4kp?log=1) {"type": "server", "timestamp": "2020-07-27T08:56:01,749Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster-es01", "node.name": "es01", "message": "[5ak89j8y6x-meow] creating index, cause [api], templates [], shards [1]/[1], mappings []", "cluster.uuid": "WKZ_vTKIQ4GkIPn1KIx7Gw", "node.id": "T1w-1R6LRoqnVfbnF67z-Q" }

[5va5w](https://swarmpit.socloze.com/#/tasks/5va5wgbuj58h806g5t7d5q4kp?log=1) {"type": "server", "timestamp": "2020-07-27T08:56:02,966Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster-es01", "node.name": "es01", "message": "[ogredkdgmp-meow] creating index, cause [api], templates [], shards [1]/[1], mappings []", "cluster.uuid": "WKZ_vTKIQ4GkIPn1KIx7Gw", "node.id": "T1w-1R6LRoqnVfbnF67z-Q" }

[5va5w](https://swarmpit.socloze.com/#/tasks/5va5wgbuj58h806g5t7d5q4kp?log=1) {"type": "server", "timestamp": "2020-07-27T08:56:03,885Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster-es01", "node.name": "es01", "message": "[gxz37yiwye-meow] creating index, cause [api], templates [], shards [1]/[1], mappings []", "cluster.uuid": "WKZ_vTKIQ4GkIPn1KIx7Gw", "node.id": "T1w-1R6LRoqnVfbnF67z-Q" }

[5va5w](https://swarmpit.socloze.com/#/tasks/5va5wgbuj58h806g5t7d5q4kp?log=1) {"type": "server", "timestamp": "2020-07-27T08:56:05,033Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster-es01", "node.name": "es01", "message": "[efyt9ormp0-meow] creating index, cause [api], templates [], shards [1]/[1], mappings []", "cluster.uuid": "WKZ_vTKIQ4GkIPn1KIx7Gw", "node.id": "T1w-1R6LRoqnVfbnF67z-Q" }

[5va5w](https://swarmpit.socloze.com/#/tasks/5va5wgbuj58h806g5t7d5q4kp?log=1) {"type": "server", "timestamp": "2020-07-27T08:56:05,870Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster-es01", "node.name": "es01", "message": "[p2fzz423np-meow] creating index, cause [api], templates [], shards [1]/[1], mappings []", "cluster.uuid": "WKZ_vTKIQ4GkIPn1KIx7Gw", "node.id": "T1w-1R6LRoqnVfbnF67z-Q" }

[5va5w](https://swarmpit.socloze.com/#/tasks/5va5wgbuj58h806g5t7d5q4kp?log=1) {"type": "server", "timestamp": "2020-07-27T08:56:07,256Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster-es01", "node.name": "es01", "message": "[s3tax1unzj-meow] creating index, cause [api], templates [], shards [1]/[1], mappings []", "cluster.uuid": "WKZ_vTKIQ4GkIPn1KIx7Gw", "node.id": "T1w-1R6LRoqnVfbnF67z-Q" }

[5va5w](https://swarmpit.socloze.com/#/tasks/5va5wgbuj58h806g5t7d5q4kp?log=1) {"type": "server", "timestamp": "2020-07-27T08:56:08,037Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster-es01", "node.name": "es01", "message": "[7p4y6snup2-meow] creating index, cause [api], templates [], shards [1]/[1], mappings []", "cluster.uuid": "WKZ_vTKIQ4GkIPn1KIx7Gw", "node.id": "T1w-1R6LRoqnVfbnF67z-Q" }

[5va5w](https://swarmpit.socloze.com/#/tasks/5va5wgbuj58h806g5t7d5q4kp?log=1) {"type": "server", "timestamp": "2020-07-27T08:56:08,793Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster-es01", "node.name": "es01", "message": "[z18fz1chwp-meow] creating index, cause [api], templates [], shards [1]/[1], mappings []", "cluster.uuid": "WKZ_vTKIQ4GkIPn1KIx7Gw", "node.id": "T1w-1R6LRoqnVfbnF67z-Q" }

[5va5w](https://swarmpit.socloze.com/#/tasks/5va5wgbuj58h806g5t7d5q4kp?log=1) {"type": "server", "timestamp": "2020-07-27T08:56:09,547Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster-es01", "node.name": "es01", "message": "[ahdpzjoeas-meow] creating index, cause [api], templates [], shards [1]/[1], mappings []", "cluster.uuid": "WKZ_vTKIQ4GkIPn1KIx7Gw", "node.id": "T1w-1R6LRoqnVfbnF67z-Q" }

[5va5w](https://swarmpit.socloze.com/#/tasks/5va5wgbuj58h806g5t7d5q4kp?log=1) {"type": "server", "timestamp": "2020-07-27T08:56:10,344Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster-es01", "node.name": "es01", "message": "[41jkjkgb60-meow] creating index, cause [api], templates [], shards [1]/[1], mappings []", "cluster.uuid": "WKZ_vTKIQ4GkIPn1KIx7Gw", "node.id": "T1w-1R6LRoqnVfbnF67z-Q" }
```

---

<div class="post-metadata">

**Author:** ![ClubberLang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/clubberlang/32/72169_2.png) [@ClubberLang](https://discuss.elastic.co/u/ClubberLang)\
**Post date:** [July 27, 2020, 10:01am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/12 "2020-07-27T10:01:28Z")

</div>

Here is the reason:

> **[New ‘Meow’ attack has deleted almost 4,000 unsecured databases](https://www.bleepingcomputer.com/news/security/new-meow-attack-has-deleted-almost-4-000-unsecured-databases/)**
>
> Dozens of unsecured databases exposed on the public web are the target of an automated 'meow' attack that wipes data without any explanation.

---

<div class="post-metadata">

**Author:** ![Krishna\_Sai\_Nag\_G](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krishna_sai_nag_g/32/80467_2.png) [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\
**Post date:** [July 29, 2020, 5:37am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/13 "2020-07-29T05:37:18Z")

</div>

@ClubberLang Hi,  
Did u find any solution for this?  
How to secure our database?

---

<div class="post-metadata">

**Author:** ![charan\_syba](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/charan_syba/32/72728_2.png) [@charan\_syba](https://discuss.elastic.co/u/charan_syba)\
**Post date:** [July 29, 2020, 5:56am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/14 "2020-07-29T05:56:37Z")

</div>

Looks like the issue is resolved, can anyone please confirm the same ?  
I can able to see the kibana home page, without restarting the kibana service..

---

<div class="post-metadata">

**Author:** ![Krishna\_Sai\_Nag\_G](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krishna_sai_nag_g/32/80467_2.png) [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\
**Post date:** [July 29, 2020, 6:02am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/15 "2020-07-29T06:02:00Z")

</div>

@charan_syba Hi charan,  
I think it is not resolved yet, today morning i have faced the same issue.  
I restarted the server and i lost all my indexes again.

---

<div class="post-metadata">

**Author:** ![charan\_syba](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/charan_syba/32/72728_2.png) [@charan\_syba](https://discuss.elastic.co/u/charan_syba)\
**Post date:** [July 29, 2020, 6:12am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/16 "2020-07-29T06:12:36Z")

</div>

@Krishna_Sai_Nag_G Hi Krishna,  
ooh ok, actually every day morning If I hit the url ip:5601 it will redirect to No Space error page and then I need to restart the server then only I will get the home page after hitting url ip:5601, but today I haven't restarted the server and I can able to get the home page.  
So, I thought somehow they have resolved the issue..

---

<div class="post-metadata">

**Author:** ![Krishna\_Sai\_Nag\_G](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krishna_sai_nag_g/32/80467_2.png) [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\
**Post date:** [July 29, 2020, 6:14am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/17 "2020-07-29T06:14:45Z")

</div>

@charan_syba Yeah charan, but i have faced the same issue on today morning. Is there any way to secure our database?

---

<div class="post-metadata">

**Author:** ![charan\_syba](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/charan_syba/32/72728_2.png) [@charan\_syba](https://discuss.elastic.co/u/charan_syba)\
**Post date:** [July 29, 2020, 6:23am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/18 "2020-07-29T06:23:18Z")

</div>

@Krishna_Sai_Nag_G Securing database I'm not sure, but the only solution right now is not exposing the application in public domain, like making the instance private or something like that..

---

<div class="post-metadata">

**Author:** ![ClubberLang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/clubberlang/32/72169_2.png) [@ClubberLang](https://discuss.elastic.co/u/ClubberLang)\
**Post date:** [July 29, 2020, 6:35am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/19 "2020-07-29T06:35:47Z")

</div>

@Krishna_Sai_Nag_G , yes securing the application work.

1 - now Kibana is only accessible internaly  
2 - Elastic has been secure with basic auth

No issues until now.

---

<div class="post-metadata">

**Author:** ![Krishna\_Sai\_Nag\_G](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krishna_sai_nag_g/32/80467_2.png) [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\
**Post date:** [July 29, 2020, 7:19am UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565/21 "2020-07-29T07:19:42Z")

</div>

@ClubberLang @charan_syba ok i will look into this, thank u.

[Next page](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565.md?page=2)
