Hi,
following on from Trouble with dashboard import in ECE cluster in the ECE forum, where I described being unable to import a dashboard to Kibana.
I'm using a command very similar to the one in the documentation to try and import a dashboard from here:
[
{
"_id": "e3c64770-6cab-11e8-acab-b78fd1091474",
"_type": "dashboard",
"_source": {
"title": "Snort: Alerts",
"hits": 0,
"description": "",
"panelsJSON": "[{\"panelIndex\":\"1\",\"gridData\":{\"x\":0,\"y\":0,\"w\":10,\"h\":1,\"i\":\"1\"},\"id\":\"0f385b50-6ca7-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"2\",\"gridData\":{\"x\":10,\"y\":0,\"w\":2,\"h\":1,\"i\":\"2\"},\"id\":\"7e0c68b0-6cab-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"3\",\"gridData\":{\"x\":0,\"y\":1,\"w\":2,\"h\":8,\"i\":\"3\"},\"id\":\"5472c280-6ca9-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"4\",\"gridData\":{\"x\":2,\"y\":1,\"w\":2,\"h\":2,\"i\":\"4\"},\"id\":\"7e83b100-6caa-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"5\",\"gridData\":{\"x\":4,\"y\":1,\"w\":2,\"h\":2,\"i\":\"5\"},\"id\":\"b45a5860-6caa-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"6\",\"gridData\":{\"x\":6,\"y\":1,\"w\":2,\"h\":2,\"i\":\"6\"},\"id\":\"f4ed1b60-6caa-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"7\",\"gridData\":{\"x\":8,\"y\":1,\"w\":2,\"h\":2,\"i\":\"7\"},\"id\":\"1d6f9720-6cab-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"8\",\"gridData\":{\"x\":10,\"y\":1,\"w\":2,\"h\":2,\"i\":\"8\"},\"id\":\"57497740-6cab-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"9\",\"gridData\":{\"x\":2,\"y\":3,\"w\":10,\"h\":2,\"i\":\"9\"},\"id\":\"40932540-6cac-11e8-acab-b78fd1091474\",\"title\":\"\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"panelIndex\":\"10\",\"gridData\":{\"x\":2,\"y\":5,\"w\":3,\"h\":2,\"i\":\"10\"},\"title\":\"Alert Classes\",\"version\":\"6.2.4\",\"type\":\"visualization\",\"id\":\"9cabb1c0-6cad-11e8-acab-b78fd1091474\"},{\"panelIndex\":\"11\",\"gridData\":{\"x\":5,\"y\":5,\"w\":3,\"h\":2,\"i\":\"11\"},\"title\":\"Alert Signatures\",\"version\":\"6.2.4\",\"type\":\"visualization\",\"id\":\"adae3f60-6cad-11e8-acab-b78fd1091474\"},{\"panelIndex\":\"12\",\"gridData\":{\"x\":8,\"y\":5,\"w\":3,\"h\":2,\"i\":\"12\"},\"title\":\"Vulnerabilities\",\"version\":\"6.2.4\",\"type\":\"visualization\",\"id\":\"2d3557a0-6cae-11e8-acab-b78fd1091474\"},{\"title\":\"Clients\",\"panelIndex\":\"13\",\"gridData\":{\"x\":2,\"y\":7,\"w\":3,\"h\":2,\"i\":\"13\"},\"version\":\"6.2.4\",\"type\":\"visualization\",\"id\":\"2831bb50-6cad-11e8-acab-b78fd1091474\"},{\"title\":\"Servers\",\"panelIndex\":\"14\",\"gridData\":{\"x\":5,\"y\":7,\"w\":3,\"h\":2,\"i\":\"14\"},\"version\":\"6.2.4\",\"type\":\"visualization\",\"id\":\"43310c30-6cad-11e8-acab-b78fd1091474\"},{\"panelIndex\":\"15\",\"gridData\":{\"x\":8,\"y\":7,\"w\":3,\"h\":2,\"i\":\"15\"},\"title\":\"Services\",\"version\":\"6.2.4\",\"type\":\"visualization\",\"id\":\"6709fd10-6cad-11e8-acab-b78fd1091474\"}]",
"optionsJSON": "{\"darkTheme\":false,\"hidePanelTitles\":false,\"useMargins\":false}",
"version": 1,
"timeRestore": false,
"kibanaSavedObjectMeta": {
"searchSourceJSON": "{\"query\":{\"language\":\"lucene\",\"query\":\"\"},\"filter\":[],\"highlightAll\":true,\"version\":true}"
}
},
"_meta": {
"savedObjectVersion": 2
}
},
This file has been truncated. show original
I know the dashboard was developed with Kibana 6.x and my ECE cluster is running 7.x
The curl command is like:
curl -v -X POST -u elastic: https:///api/saved_objects/_import?overwrite=true-H 'kbn-xsrf: true' --form file=@file.ndjson
The curl transfer seems to hang after headers around the point where it gets HTTP 100 Continue so I'm not sure Kibana is seeing the content or failing to process it. Not really getting that far. Please check the post linked above for the curl output...
Any suggestions for debugging this or manual approaches to upgrade the dashboard and import it?