Visualisation don't work even after recreating index templates

The problem is that the id of the index pattern changed when you recreated it. In the past, the id for all saved objects was just their name, so your old elastiflow-* pattern had the same ID. Likewise, all the saved objects that referenced it (visualizations and saved searches) used that value for their index.

Some time ago, Kibana switched to using UUID strings for the value to allow for saved objects with the same name (mostly to enable multiple index patterns with the same pattern).

Your new index pattern in elastiflow-*, but the id in Elasticsearch is going to be some UUID value, which you'll have to look up. Once you know that value, you have 2 options:

  • Change the id of the index pattern to elastiflow-*
  • Change the kibanaSavedObjectMeta.searchSourceJSON.index value in all of your saved visualization objects to match the UUID of the index pattern