Data is not coming in kibana Dashborad Elasticsearch

Elasticsearch version:2…4.6

kibana version:4.6.2

Searchguard version:2.4.6

Headers:

Request URL:https://192.168.0.221:5602/elasticsearch/isp_vodafone_cdncache*/_field_stats?level=indices
Request Method:POST
Status Code:500 Internal Server Error
Remote Address:192.168.0.221:5602
Referrer Policy:no-referrer-when-downgrade
Response Headers
view source
cache-control:no-cache
Connection:keep-alive
content-encoding:gzip
content-type:application/json; charset=UTF-8
kbn-name:kibana
kbn-version:4.6.3
set-cookie:searchguard_authentication=Fe26.215ab95516691e6a712e2368e780a371b5fb8094dbd5d221da92fb26ab9e44746qDqOzKlukBcBSlxR9FI_cA5TOnbJbXD5DqYwlgkNzmL8IsL-UzB2alJiF-TsRA3LsY_C7BdUrDjpqe5PXva61T2zz9854oNqFyjc3RJH26IP9Wsm2BxJ4WuYMjZFh0GRjfXvC0eThrOgBVDL12On7GW-zPv3wDP7k5fVa5SLoxZF6FYO6EttTH9KUAbSxt_Xov4ZlZsIQ2x5OcjNg9o-aFmhSifK-W4wlBdyqnYIddhhnVBrR7ohNiEgTGYNk9coU6a4e3ba1462111054ffd803a694c1c27e01d741448dbc55f0a6af06bae1424b5_ph4eeB9mR_ijBwJMEpUgllFkR7-Tv5iD1EVLsNlIHO4; Max-Age=3600; Expires=Mon, 18 Sep 2017 13:45:07 GMT; Secure; HttpOnly; Path=/
Transfer-Encoding:chunked
vary:accept-encoding
Request Headers
view source
Accept:application/json, text/plain, /
Accept-Encoding:gzip, deflate, br
Accept-Language:en-US,en;q=0.8
Connection:keep-alive
Content-Length:186
Content-Type:application/json;charset=UTF-8
Cookie:searchguard_authentication=Fe26.2cbab47138c19a0c77ee3d39cdca8efc5ccbba1dccb8485046b9f3c9f7e249b45_T_7FQzs3UPV68X07UNmW5w_mVpN6yAsFbFkwrXxyAUhl4WtyXGAvheBpRI3DAmtCXg76rQOekBIpAjPd4sqOFrtBAYjArCNZL7ia5lIiY8rqKveTyYySHBxXNRo25QZ4PtzDgd2QhPwnyy63dlNM1ifOufTJKTtCVP7ejK3M9jxNMvIXtgxfGk8uaHsV5pZw6CN86-e8or1SHr9Iv0s1L8Yzatnbp8nOeAZhkM1Tg7nGcxgFhYzhXL_im-8oAfFSs42ba87dccf12ccafb118e99551763f3d9149c50f7821f50540d16f67d48a19076_0JCgwGarIVvZJOg74jjW4J_inuELKroTM-a89FQWB3I

Host:192.168.0.221:5602

kbn-version:4.6.3

Origin:https://192.168.0.221:5602

Referer:https://192.168.0.221:5602/app/kibana

User-Agent:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/60.0.3112.113 Chrome/60.0.3112.113 Safari/537.36

Query String Parameters

view source

view URL encoded

level:indices

Request Payload

view source

{fields: [“http_timestamp”],…}

fields

:

[“http_timestamp”]

0

:

“http_timestamp”

index_constraints

:

{http_timestamp: {max_value: {gte: 1498847400000, format: “epoch_millis”},…}}

http_timestamp

:

{max_value: {gte: 1498847400000, format: “epoch_millis”},…}

Preview:

{,…}

error

:

{root_cause: [{type: “unsupported_operation_exception”, reason: “custom format isn’t supported”}],…}

reason

:

“custom format isn’t supported”

root_cause

:

[{type: “unsupported_operation_exception”, reason: “custom format isn’t supported”}]

0

:

{type: “unsupported_operation_exception”, reason: “custom format isn’t supported”}

reason

:

“custom format isn’t supported”

type

:

“unsupported_operation_exception”

type

:

“unsupported_operation_exception”

status

:

500

Responce:

{“error”:{“root_cause”:[{“type”:“unsupported_operation_exception”,“reason”:“custom
format isn’t supported”}],“type”:“unsupported_operation_exception”,“reason”:“custom format isn’t supported”},“status”:500}

What is the error???

···

Date:Mon, 18 Sep 2017 12:45:07 GMT

This is most likely not a Search Guard error, but related to Elasticsearch and Kibana. I think you would see the same error without SG installed.

See for example here in the ES forums:

···

On Monday, September 18, 2017 at 3:10:29 PM UTC+2, Manik Mahajan wrote:

Elasticsearch version:2…4.6

kibana version:4.6.2

Searchguard version:2.4.6

Headers:

Request URL:https://192.168.0.221:5602/elasticsearch/isp_vodafone_cdncache*/_field_stats?level=indices
Request Method:POST
Status Code:500 Internal Server Error
Remote Address:192.168.0.221:5602
Referrer Policy:no-referrer-when-downgrade
Response Headers
view source
cache-control:no-cache
Connection:keep-alive
content-encoding:gzip
content-type:application/json; charset=UTF-8
Date:Mon, 18 Sep 2017 12:45:07 GMT
kbn-name:kibana
kbn-version:4.6.3
set-cookie:searchguard_authentication=Fe26.215ab95516691e6a712e2368e780a371b5fb8094dbd5d221da92fb26ab9e44746qDqOzKlukBcBSlxR9FI_cA5TOnbJbXD5DqYwlgkNzmL8IsL-UzB2alJiF-TsRA3LsY_C7BdUrDjpqe5PXva61T2zz9854oNqFyjc3RJH26IP9Wsm2BxJ4WuYMjZFh0GRjfXvC0eThrOgBVDL12On7GW-zPv3wDP7k5fVa5SLoxZF6FYO6EttTH9KUAbSxt_Xov4ZlZsIQ2x5OcjNg9o-aFmhSifK-W4wlBdyqnYIddhhnVBrR7ohNiEgTGYNk9coU6a4e3ba1462111054ffd803a694c1c27e01d741448dbc55f0a6af06bae1424b5_ph4eeB9mR_ijBwJMEpUgllFkR7-Tv5iD1EVLsNlIHO4; Max-Age=3600; Expires=Mon, 18 Sep 2017 13:45:07 GMT; Secure; HttpOnly; Path=/
Transfer-Encoding:chunked
vary:accept-encoding
Request Headers
view source
Accept:application/json, text/plain, /
Accept-Encoding:gzip, deflate, br
Accept-Language:en-US,en;q=0.8
Connection:keep-alive
Content-Length:186
Content-Type:application/json;charset=UTF-8
Cookie:searchguard_authentication=Fe26.2cbab47138c19a0c77ee3d39cdca8efc5ccbba1dccb8485046b9f3c9f7e249b45_T_7FQzs3UPV68X07UNmW5w_mVpN6yAsFbFkwrXxyAUhl4WtyXGAvheBpRI3DAmtCXg76rQOekBIpAjPd4sqOFrtBAYjArCNZL7ia5lIiY8rqKveTyYySHBxXNRo25QZ4PtzDgd2QhPwnyy63dlNM1ifOufTJKTtCVP7ejK3M9jxNMvIXtgxfGk8uaHsV5pZw6CN86-e8or1SHr9Iv0s1L8Yzatnbp8nOeAZhkM1Tg7nGcxgFhYzhXL_im-8oAfFSs42ba87dccf12ccafb118e99551763f3d9149c50f7821f50540d16f67d48a19076_0JCgwGarIVvZJOg74jjW4J_inuELKroTM-a89FQWB3I

Host:192.168.0.221:5602

kbn-version:4.6.3

Origin:https://192.168.0.221:5602

Referer:https://192.168.0.221:5602/app/kibana

User-Agent:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/60.0.3112.113 Chrome/60.0.3112.113 Safari/537.36

Query String Parameters

view source

view URL encoded

level:indices

Request Payload

view source

{fields: [“http_timestamp”],…}

fields

:

[“http_timestamp”]

0

:

“http_timestamp”

index_constraints

:

{http_timestamp: {max_value: {gte: 1498847400000, format: “epoch_millis”},…}}

http_timestamp

:

{max_value: {gte: 1498847400000, format: “epoch_millis”},…}

Preview:

{,…}

error

:

{root_cause: [{type: “unsupported_operation_exception”, reason: “custom format isn’t supported”}],…}

reason

:

“custom format isn’t supported”

root_cause

:

[{type: “unsupported_operation_exception”, reason: “custom format isn’t supported”}]

0

:

{type: “unsupported_operation_exception”, reason: “custom format isn’t supported”}

reason

:

“custom format isn’t supported”

type

:

“unsupported_operation_exception”

type

:

“unsupported_operation_exception”

status

:

500

Responce:

{“error”:{“root_cause”:[{“type”:“unsupported_operation_ exception”,“reason”:“custom
format isn’t supported”}],“type”:“unsupported_operation_exception”,“reason”:“custom format isn’t supported”},“status”:500}

What is the error???