[Winlogbeat 7.10.1 dashboards]: could not locate some index pattern fields

Elastic Stack Beats
1

Hello,

I am using Elasticsearch, kibana, logstash, and winlogbeat, all version 7.10.1

I configured winlogbeat and run: .\winlogbeat.exe setup -e and I had no error in my winlogbeat logs, but in kibana there are some dashboards working and some of them I am getting errors:

Could not locate that index-pattern-field (id: powershell.connected_user.name)
Could not locate that index-pattern-field (id: powershell.command.name)

The issue here is that the fields are not found in the index pattern. Also refreshing the index pattern didn't solve the issue.

image
image1341×673 32.3 KB

Also when trying to test some PowerShell commands on the beats clients I can see that they are not listed / counted in Kibana!

image
image1120×243 16.3 KB

  • I can see the logs in elasticsearch and most of the visualizations are ok, only the ones I've mentioned.

5b54df2c7038e6dfa4d36b53710fe6379ca153cc_2_690x129

Also I can see that other people having same issue here with no solution so far:

Any help is really appreciated.

Regards,

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.