SOLVED Index pattern field (LogonType)

Elastic Stack Elasticsearch
1

Hello

I'm trying to import a premade visualization from https://www.elastic.co/blog/monitoring-windows-logons-with-winlogbeat

The thing is when i import this object i get the follow error:
Saved Objects: Could not locate that index-pattern-field (id: event_data.LogonType)

Before trying to import this object i used this:
curl -XPUT 'http://localhost:9200/_template/winlogbeat?pretty' -d@winlogbeat.template.json
and got "acknowledged" : true

winlogbeat.template.json is the template from the same article:

Can someone help me with this error?

2

I used:
curl -XPUT 'https://localhost:9200/_template/winlogbeat_1' -d@winlogbeat.template.json

Now it works :slight_smile: