Winlogbeat Dashboard Problem - Visualize: "field" is a required parameter

Elastic Stack Beats
1

New ELK 6.2.3 installation on Windows. I installed WLB on a Windows 2012R2 server and specified in the yml to setup dashboard. The index pattern and dashboard are there but I am getting the following error:

image

2

This can be caused by not having data in your winlogbeat indexes, please check that you have any data in the winlogbeat-* indexes in Elasticsearch.

If you have, or you are not sure, you can also try to reload the index field list.

3

Thanks, I have 83K events in there now. I also refreshed the index pattern. Here is the full dashboard output.

image
image.png1000×552 41.6 KB