Trouble importing dashboard

mesiasc · December 3, 2019, 9:11am

Hi,

following on from Trouble with dashboard import in ECE cluster in the ECE forum, where I described being unable to import a dashboard to Kibana.

I'm using a command very similar to the one in the documentation to try and import a dashboard from here:

github.com

robcowart/synesis_lite_snort/blob/master/kibana/synlite_snort.dashboards.json

[
  {
    "_id": "e3c64770-6cab-11e8-acab-b78fd1091474",
    "_type": "dashboard",
    "_source": {
      "title": "Snort: Alerts",
      "hits": 0,
      "description": "",
      "panelsJSON": "[{\"panelIndex\":\"1\",\"gridData\":{\"x\":0,\"y\":0,\"w\":10,\"h\":1,\"i\":\"1\"},\"id\":\"0f385b50-6ca7-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"2\",\"gridData\":{\"x\":10,\"y\":0,\"w\":2,\"h\":1,\"i\":\"2\"},\"id\":\"7e0c68b0-6cab-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"3\",\"gridData\":{\"x\":0,\"y\":1,\"w\":2,\"h\":8,\"i\":\"3\"},\"id\":\"5472c280-6ca9-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"4\",\"gridData\":{\"x\":2,\"y\":1,\"w\":2,\"h\":2,\"i\":\"4\"},\"id\":\"7e83b100-6caa-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"5\",\"gridData\":{\"x\":4,\"y\":1,\"w\":2,\"h\":2,\"i\":\"5\"},\"id\":\"b45a5860-6caa-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"6\",\"gridData\":{\"x\":6,\"y\":1,\"w\":2,\"h\":2,\"i\":\"6\"},\"id\":\"f4ed1b60-6caa-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"7\",\"gridData\":{\"x\":8,\"y\":1,\"w\":2,\"h\":2,\"i\":\"7\"},\"id\":\"1d6f9720-6cab-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"8\",\"gridData\":{\"x\":10,\"y\":1,\"w\":2,\"h\":2,\"i\":\"8\"},\"id\":\"57497740-6cab-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"9\",\"gridData\":{\"x\":2,\"y\":3,\"w\":10,\"h\":2,\"i\":\"9\"},\"id\":\"40932540-6cac-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"10\",\"gridData\":{\"x\":2,\"y\":5,\"w\":3,\"h\":2,\"i\":\"10\"},\"title\":\"Alert Classes\",\"version\":\"6.2.4\",\"type\":\"visualization\",\"id\":\"9cabb1c0-6cad-11e8-acab-b78fd1091474\"},{\"panelIndex\":\"11\",\"gridData\":{\"x\":5,\"y\":5,\"w\":3,\"h\":2,\"i\":\"11\"},\"title\":\"Alert Signatures\",\"version\":\"6.2.4\",\"type\":\"visualization\",\"id\":\"adae3f60-6cad-11e8-acab-b78fd1091474\"},{\"panelIndex\":\"12\",\"gridData\":{\"x\":8,\"y\":5,\"w\":3,\"h\":2,\"i\":\"12\"},\"title\":\"Vulnerabilities\",\"version\":\"6.2.4\",\"type\":\"visualization\",\"id\":\"2d3557a0-6cae-11e8-acab-b78fd1091474\"},{\"title\":\"Clients\",\"panelIndex\":\"13\",\"gridData\":{\"x\":2,\"y\":7,\"w\":3,\"h\":2,\"i\":\"13\"},\"version\":\"6.2.4\",\"type\":\"visualization\",\"id\":\"2831bb50-6cad-11e8-acab-b78fd1091474\"},{\"title\":\"Servers\",\"panelIndex\":\"14\",\"gridData\":{\"x\":5,\"y\":7,\"w\":3,\"h\":2,\"i\":\"14\"},\"version\":\"6.2.4\",\"type\":\"visualization\",\"id\":\"43310c30-6cad-11e8-acab-b78fd1091474\"},{\"panelIndex\":\"15\",\"gridData\":{\"x\":8,\"y\":7,\"w\":3,\"h\":2,\"i\":\"15\"},\"title\":\"Services\",\"version\":\"6.2.4\",\"type\":\"visualization\",\"id\":\"6709fd10-6cad-11e8-acab-b78fd1091474\"}]",
      "optionsJSON": "{\"darkTheme\":false,\"hidePanelTitles\":false,\"useMargins\":false}",
      "version": 1,
      "timeRestore": false,
      "kibanaSavedObjectMeta": {
        "searchSourceJSON": "{\"query\":{\"language\":\"lucene\",\"query\":\"\"},\"filter\":[],\"highlightAll\":true,\"version\":true}"
      }
    },
    "_meta": {
      "savedObjectVersion": 2
    }
  },

This file has been truncated. show original

I know the dashboard was developed with Kibana 6.x and my ECE cluster is running 7.x

The curl command is like:
curl -v -X POST -u elastic: https:///api/saved_objects/_import?overwrite=true-H 'kbn-xsrf: true' --form file=@file.ndjson

The curl transfer seems to hang after headers around the point where it gets HTTP 100 Continue so I'm not sure Kibana is seeing the content or failing to process it. Not really getting that far. Please check the post linked above for the curl output...

Any suggestions for debugging this or manual approaches to upgrade the dashboard and import it?

system · December 31, 2019, 9:11am

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.