filebeat error - kibana dashboard
610 views
Skip to first unread message
Suat Toksöz
Oct 10, 2019, 9:16:10 AM10/10/19
to Wazuh mailing list
Hi,
on filebeat setup we are getting error :
2019-10-10T14:55:32.484+0300 ERROR instance/beat.go:878 Exiting: Failed to import dashboard: Failed to load directory /usr/share/filebeat/kibana/7/dashboard:
error loading /usr/share/filebeat/kibana/7/dashboard/Filebeat-aws-s3access-overview.json: returned 422 to import file: <nil>. Response: {"statusCode":422,"error":"Unprocessable Entity","message":"Document \"5e5a3c90-bac0-11e9-9f70-1f7bda85a5eb\" has property \"search\" which belongs to a more recent version of Kibana (7.4.0)."}
error loading /usr/share/filebeat/kibana/7/dashboard/Filebeat-aws-s3access-overview.json: returned 422 to import file: <nil>. Response: {"statusCode":422,"error":"Unprocessable Entity","message":"Document \"5e5a3c90-bac0-11e9-9f70-1f7bda85a5eb\" has property \"search\" which belongs to a more recent version of Kibana (7.4.0)."}
Best regards,
Suat Toksöz
Miguel Angel Abarca Caballero
Oct 14, 2019, 11:45:02 AM10/14/19
to Wazuh mailing list
Hello Suat,
Looking at the error code that Filebeat is giving to you, it seems that the Filebeat-aws-s3access-overview.json dashboard contains a non recognized field because of version incompatibility.
Which version of Wazuh are you using? Which version of ELK (including Filebeat, Elasticsearch, and Kibana) are you using?
Which version of Wazuh are you using? Which version of ELK (including Filebeat, Elasticsearch, and Kibana) are you using?
Keep in mind that the last supported ELK version for Wazuh 3.10.2 is ELK 7.3.2.
Finally, could you share this specific dashboard? This way we will be able to further help you.
Regards,
Miguel Ángel Abarca
Reply all
Reply to author
Forward
0 new messages