SOLVED: Keep getting "Unable to fetch mapping. Do you have indices matching the pattern?"

Elastic Stack Kibana
1

To begin, yes, I've checked this thread. And this one. And this one. None of them helped.

I'm using debian Jessie, with the deb https://artifacts.elastic.co/packages/5.x/apt stable main source for the ELK stack packages.

I've also inserted the shakespeare test data and (I think) successfully added logstash and syslog into ES. This is what my indices output looks like:

  admin@kibtest:~$ curl 'localhost:9200/_cat/indices?v'
  health status index               uuid                   pri rep docs.count docs.deleted store.size pri.store.size
  yellow open   syslog              PTDJ5AyiQOmE_S-vYtU8bQ   5   1      16309            0        3mb            3mb
  yellow open   syslog-ng           zN3AabOwTcOxOp3ftYMCdg   5   1       2232            0    733.7kb        733.7kb
  yellow open   logstash-2017.05.11 vlgAVwp9SpKYKdMb96kd3Q   5   1       1098            0    572.9kb        572.9kb
  yellow open   shakespeare         pJJ06zu0RiOFrlmrB10Mmw   5   1     111396            0     29.1mb         29.1mb
  yellow open   .kibana             t3l8tZxLSRKAfshFS1eiIA   1   1          1            0      3.1kb          3.1kb

Yet when I fire up Kibana the index button remains greyed out with the above message no matter what I type into the search string box.

I have no idea what I'm overlooking, and I've run out of things to try. Any suggestions would be welcome.

EDIT: One of the threads mentioned logging in with different roles, but I couldn't find anything resembling user access controls in Kibana so I'm not sure what they meant...

SECOND EDIT Apparently, what you need to do is install the X-Pack plugin for both ES and Kibana, then use that to authenticate. This will allow you to set up filters and proceed.

2

Is there anything in the KB logs?
What version are you on?

3

5.4.0 on all counts, and the kibana logs do not appear to contain anything useful:

root@feynman:/usr/share/kibana/bin# ./kibana --verbose 
  log   [13:31:22.664] [debug][plugins] Scanning `/usr/share/kibana/plugins` for plugins
  log   [13:31:22.673] [debug][plugins] Scanning `/usr/share/kibana/src/core_plugins` for plugins
  log   [13:31:22.715] [debug][plugins] Found plugin at /usr/share/kibana/src/core_plugins/console/index.js
  log   [13:31:22.852] [debug][plugins] Found plugin at /usr/share/kibana/src/core_plugins/elasticsearch/index.js
  log   [13:31:22.908] [debug][plugins] Found plugin at /usr/share/kibana/src/core_plugins/kbn_doc_views/index.js
  log   [13:31:22.954] [debug][plugins] Found plugin at /usr/share/kibana/src/core_plugins/kbn_vislib_vis_types/index.js
  log   [13:31:23.016] [debug][plugins] Found plugin at /usr/share/kibana/src/core_plugins/kibana/index.js
  log   [13:31:23.072] [debug][plugins] Found plugin at /usr/share/kibana/src/core_plugins/markdown_vis/index.js
  log   [13:31:23.122] [debug][plugins] Found plugin at /usr/share/kibana/src/core_plugins/metric_vis/index.js
  log   [13:31:23.255] [debug][plugins] Found plugin at /usr/share/kibana/src/core_plugins/metrics/index.js
  log   [13:31:23.317] [debug][plugins] Found plugin at /usr/share/kibana/src/core_plugins/spy_modes/index.js
  log   [13:31:23.376] [debug][plugins] Found plugin at /usr/share/kibana/src/core_plugins/status_page/index.js
  log   [13:31:23.458] [debug][plugins] Found plugin at /usr/share/kibana/src/core_plugins/table_vis/index.js
  log   [13:31:23.538] [debug][plugins] Found plugin at /usr/share/kibana/src/core_plugins/tagcloud/index.js
  log   [13:31:23.621] [debug][plugins] Found plugin at /usr/share/kibana/src/core_plugins/timelion/index.js
  log   [13:31:23.953] [debug][optimize] All bundles are cached and ready to go!
  log   [13:31:23.966] [debug][plugins] Initializing plugin kibana@kibana
  log   [13:31:24.007] [info][status][plugin:kibana@5.4.0] Status changed from uninitialized to green - Ready
  log   [13:31:24.010] [debug][plugins] Initializing plugin elasticsearch@kibana
  log   [13:31:24.199] [info][status][plugin:elasticsearch@5.4.0] Status changed from uninitialized to yellow - Waiting for Elasticsearch
  log   [13:31:24.223] [server][uuid][uuid] Resuming persistent Kibana instance UUID: c8d21178-0407-4439-9bbc-38df86ee0f54
  log   [13:31:24.235] [debug][plugins] Initializing plugin console@kibana
  log   [13:31:24.260] [debug][plugin] Checking Elasticsearch version
  log   [13:31:24.274] [info][status][plugin:console@5.4.0] Status changed from uninitialized to green - Ready
  log   [13:31:24.277] [debug][plugins] Initializing plugin kbn_doc_views@kibana
  log   [13:31:24.289] [debug][plugins] Initializing plugin kbn_vislib_vis_types@kibana
  log   [13:31:24.302] [debug][plugins] Initializing plugin markdown_vis@kibana
  log   [13:31:24.309] [info][status][plugin:elasticsearch@5.4.0] Status changed from yellow to green - Kibana index ready
  log   [13:31:24.313] [debug][plugins] Initializing plugin metric_vis@kibana
  log   [13:31:24.326] [debug][plugins] Initializing plugin metrics@kibana
  log   [13:31:24.350] [info][status][plugin:metrics@5.4.0] Status changed from uninitialized to green - Ready
  log   [13:31:24.360] [debug][plugins] Initializing plugin spy_modes@kibana
  log   [13:31:24.373] [debug][plugins] Initializing plugin status_page@kibana
  log   [13:31:24.380] [debug][plugins] Initializing plugin table_vis@kibana
  log   [13:31:24.389] [debug][plugins] Initializing plugin tagcloud@kibana
  log   [13:31:24.398] [debug][plugins] Initializing plugin timelion@kibana
  log   [13:31:24.650] [info][status][plugin:timelion@5.4.0] Status changed from uninitialized to green - Ready
  log   [13:31:24.656] [info][listening] Server running at http://localhost:5601
  log   [13:31:24.660] [info][status][ui settings] Status changed from uninitialized to green - Ready
  log   [13:31:26.817] [debug][plugin] Checking Elasticsearch version
  ops   [13:31:27.639]  memory: 87.2MB uptime: 0:00:08 load: [0.30 0.47 0.41] delay: 1.982
  log   [13:31:29.340] [debug][plugin] Checking Elasticsearch version

  log   [13:31:31.856] [debug][plugin] Checking Elasticsearch version
  ops   [13:31:32.642]  memory: 88.2MB uptime: 0:00:13 load: [0.28 0.46 0.41] delay: 0.985
  log   [13:31:34.391] [debug][plugin] Checking Elasticsearch version
respons [13:31:35.703]  GET /app/kibana 200 495ms - 9.0B
respons [13:31:35.788]  GET /bundles/commons.style.css?v=15063 304 26ms - 9.0B
respons [13:31:35.793]  GET /bundles/kibana.style.css?v=15063 304 18ms - 9.0B
respons [13:31:35.805]  GET /bundles/commons.bundle.js?v=15063 304 29ms - 9.0B
respons [13:31:35.976]  GET /bundles/kibana.bundle.js?v=15063 304 56ms - 9.0B
  log   [13:31:36.919] [debug][plugin] Checking Elasticsearch version
respons [13:31:36.950]  GET /plugins/kibana/assets/discover.svg 304 4ms - 9.0B
respons [13:31:36.968]  GET /plugins/kibana/assets/visualize.svg 304 13ms - 9.0B
respons [13:31:36.974]  GET /plugins/kibana/assets/dashboard.svg 304 5ms - 9.0B
respons [13:31:36.978]  GET /plugins/timelion/icon.svg 304 7ms - 9.0B
respons [13:31:36.982]  GET /plugins/kibana/assets/wrench.svg 304 10ms - 9.0B
respons [13:31:36.986]  GET /plugins/kibana/assets/settings.svg 304 5ms - 9.0B
respons [13:31:36.993]  GET /plugins/kibana/assets/play-circle.svg 304 5ms - 9.0B
respons [13:31:37.001]  GET /bundles/0cebf3d61338c454670b1c5bdf5d6d8d.svg 304 3ms - 9.0B
respons [13:31:37.081]  GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=es_5_0 200 57ms - 9.0B
respons [13:31:37.104]  POST /es_admin/.kibana/index-pattern/_search?stored_fields= 200 21ms - 9.0B
  ops   [13:31:37.638]  memory: 98.6MB uptime: 0:00:18 load: [0.25 0.46 0.41] delay: 0.733
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.