object importing issue
Rahul Manoj
We are currently testing an upgrade from Wazuh 4.3 (Elasticsearch + Kibana) to Wazuh 4.14 (Wazuh Indexer + Wazuh Dashboard).
As part of the migration validation, we attempted to export existing dashboards and visualizations from the legacy Kibana setup and import them into the newer Wazuh Dashboard.
During import, the error shown in the screenshot comes up.
is there any method for properly importing visualizations from the previous version to the newer version of wazuh?
Lens and tags are not really required. without that is it possible to do this properly without any conflicts/complications in the future?
what is the best recommended solution for this scenario?
Stuti Gupta
Hi Manoj
The error occurs because the dashboard file you are trying to import was created using a Kibana format that is newer than the format supported by your system. In your case, the file shows it was created with version 7.17.3, but the importer supports compatibility only up to 7.9.3 for that format. Because of this version difference, the system cannot read the file and returns the “Unprocessable Entity” error.
This usually happens when moving from Wazuh 4.3 (which used Elasticsearch and Kibana) to Wazuh 4.14 (which uses Wazuh Indexer and Wazuh Dashboard based on OpenSearch). Even though the new environment runs on OpenSearch 2.x, dashboards exported from the older setup still contain Kibana metadata, and some of that information cannot be automatically converted during import. Starting from version 4.6, the Elasticsearch and Kibana integrations are no longer actively developed and only receive critical security updates.
Also note that upgrading directly from Wazuh 4.3 with Elasticsearch and Kibana to 4.14 is not recommended. Many components and integrations changed between these versions.
Because of this, the recommended approach is to migrate the 4.3 Elasticsearch + Kibana deployment to the 4.3 Wazuh Indexer and Wazuh Dashboard version first. You can follow the migration guide here:
https://documentation.wazuh.com/4.3/migration-guide/index.html
After that, upgrade gradually between versions, for example:
4.3 > 4.6 > 4.9 > 4.14
https://documentation.wazuh.com/current/upgrade-guide/index.html
This step-by-step upgrade helps maintain stability and ensures compatibility with the changes introduced in each version. During this process, you should export and import your custom dashboards at each stage so they remain compatible.
Another option is to edit the exported .ndjson file manually before importing. Sometimes the import works if version-specific fields are removed. However, this method is not guaranteed to work because the structure of some visualizations changed between versions.
The alternative is to recreate the dashboards in the new environment. If your previous dashboards used visualizations (such as tables or bar charts), rebuilding them using the new index patterns is easier.
Also, make sure to make a backup before starting the updating process. https://documentation.wazuh.com/current/migration-guide/creating/index.html
Let me know if you need any further help.