# \[Winlogbeat 7.10.1 dashboards\]: could not locate some index pattern fields

**URL:** <https://discuss.elastic.co/t/winlogbeat-7-10-1-dashboards-could-not-locate-some-index-pattern-fields/261984>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [January 23, 2021, 9:27am UTC](https://discuss.elastic.co/t/winlogbeat-7-10-1-dashboards-could-not-locate-some-index-pattern-fields/261984 "2021-01-23T09:27:20Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ethical20](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ethical20/32/68123_2.png) [@ethical20](https://discuss.elastic.co/u/ethical20)\
**Post date:** [January 23, 2021, 9:27am UTC](https://discuss.elastic.co/t/winlogbeat-7-10-1-dashboards-could-not-locate-some-index-pattern-fields/261984/1 "2021-01-23T09:27:20Z")

</div>

Hello,

I am using Elasticsearch, kibana, logstash, and winlogbeat, all version 7.10.1

I configured winlogbeat and run: `.\winlogbeat.exe setup -e` and I had no error in my winlogbeat logs, but in kibana there are some dashboards working and some of them I am getting errors:

> Could not locate that index-pattern-field (id: powershell.connected\_user.name)  
> Could not locate that index-pattern-field (id: powershell.command.name)

The issue here is that the fields are not found in the index pattern. Also refreshing the index pattern didn't solve the issue.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/8/88c5961da080c8bc6ac735efc3b070f68072fc9e.png)

Also when trying to test some PowerShell commands on the beats clients I can see that they are not listed / counted in Kibana!

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/d/cdbce606a03b1c2091be4d6e361266470393dd2f.png)

- I can see the logs in elasticsearch and most of the visualizations are ok, only the ones I've mentioned.

![5b54df2c7038e6dfa4d36b53710fe6379ca153cc_2_690x129](https://us1.discourse-cdn.com/elastic/original/3X/4/e/4e6eec0093011cef2656f96469bbb8a0385b8e77.png)

Also I can see that other people having same issue here with no solution so far:

> [@\[Winlogbeat 7.10.1 dashboards\]: could not locate some index pattern fields](https://discuss.elastic.co/t/winlogbeat-7-10-1-dashboards-could-not-locate-some-index-pattern-fields/259961):
>
> Hello, I am using Elasticsearch, kibana and winlogbeat, all version 7.10.1 I configured winlogbeat and run: .\winlogbeat.exe setup -e and I had no error in my winlogbeat logs, but in kibana there are some dashboards working and some of them I am getting errors: Could not locate that index-pattern-field (id: powershell.connected\_user.name) Could not locate that index-pattern-field (id: powershell.engine.version) Could not locate that index-pattern-field (id: powershell.command.name) Could not …

Any help is really appreciated.

Regards,

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 20, 2021, 11:27am UTC](https://discuss.elastic.co/t/winlogbeat-7-10-1-dashboards-could-not-locate-some-index-pattern-fields/261984/2 "2021-02-20T11:27:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.