Winlogbeat Dashboard Problem - Visualize: "field" is a required parameter

New ELK 6.2.3 installation on Windows. I installed WLB on a Windows 2012R2 server and specified in the yml to setup dashboard. The index pattern and dashboard are there but I am getting the following error:

image

This can be caused by not having data in your winlogbeat indexes, please check that you have any data in the winlogbeat-* indexes in Elasticsearch.

If you have, or you are not sure, you can also try to reload the index field list.

Thanks, I have 83K events in there now. I also refreshed the index pattern. Here is the full dashboard output.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.