# Imported Dashboard cannot be seen
**URL:** https://forum.opensearch.org/t/imported-dashboard-cannot-be-seen/5284
**Category:** Open Source Elasticsearch and Kibana
**Created:** [March 10, 2021, 8:42am UTC](https://forum.opensearch.org/t/imported-dashboard-cannot-be-seen/5284 "2021-03-10T08:42:58Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@cavril](https://forum.opensearch.org/u/cavril)
#### Post date: [March 10, 2021, 8:42am UTC](https://forum.opensearch.org/t/imported-dashboard-cannot-be-seen/5284/1 "2021-03-10T08:42:58Z")
Hi,
I am using winlogbeat to send the security event to Kibana.
The dashboards were successfully imported through the API, however i cannot see them on Kibana Dashboards:
> 2021-03-10T14:53:48.453+0700 DEBUG [dashboards] dashboards/kibana\_loader.go:156 Initialize the Kibana 7.10.2 loader
> 2021-03-10T14:53:48.453+0700 DEBUG [dashboards] dashboards/kibana\_loader.go:156 Kibana URL [https://kibana:5601](https://kibana:5601)
> 2021-03-10T14:53:49.867+0700 DEBUG [dashboards] dashboards/kibana\_loader.go:156 Importing directory C:\winlogbeat\kibana/7
> 2021-03-10T14:53:49.867+0700 DEBUG [dashboards] dashboards/kibana\_loader.go:156 Import directory C:\winlogbeat\kibana/7
> 2021-03-10T14:53:49.867+0700 DEBUG [dashboards] dashboards/kibana\_loader.go:156 Import dashboard from C:\winlogbeat\kibana\7\dashboard\Powershell-Overview-Dashboard.json
> 2021-03-10T14:53:50.870+0700 DEBUG [dashboards] dashboards/kibana\_loader.go:156 Import dashboard from C:\winlogbeat\kibana\7\dashboard\Winlogbeat-overview.json
> 2021-03-10T14:53:52.056+0700 DEBUG [dashboards] dashboards/kibana\_loader.go:156 Import dashboard from C:\winlogbeat\kibana\7\dashboard\winlogbeat-security-failed-blocked-accounts-tsvb.json
> 2021-03-10T14:53:53.949+0700 DEBUG [dashboards] dashboards/kibana\_loader.go:156 Import dashboard from C:\winlogbeat\kibana\7\dashboard\winlogbeat-security-failed-blocked-accounts.json
> 2021-03-10T14:53:57.087+0700 DEBUG [dashboards] dashboards/kibana\_loader.go:156 Import dashboard from C:\winlogbeat\kibana\7\dashboard\winlogbeat-security-group-management-tsvb.json
> 2021-03-10T14:53:57.920+0700 DEBUG [dashboards] dashboards/kibana\_loader.go:156 Import dashboard from C:\winlogbeat\kibana\7\dashboard\winlogbeat-security-group-management.json
> 2021-03-10T14:53:58.930+0700 DEBUG [dashboards] dashboards/kibana\_loader.go:156 Import dashboard from C:\winlogbeat\kibana\7\dashboard\winlogbeat-security-user-logons-tsvb.json
> 2021-03-10T14:53:59.949+0700 DEBUG [dashboards] dashboards/kibana\_loader.go:156 Import dashboard from C:\winlogbeat\kibana\7\dashboard\winlogbeat-security-user-logons.json
> 2021-03-10T14:54:00.967+0700 DEBUG [dashboards] dashboards/kibana\_loader.go:156 Import dashboard from C:\winlogbeat\kibana\7\dashboard\winlogbeat-security-user-management-tsvb.json
> 2021-03-10T14:54:01.981+0700 DEBUG [dashboards] dashboards/kibana\_loader.go:156 Import dashboard from C:\winlogbeat\kibana\7\dashboard\winlogbeat-security-user-management.json
> 2021-03-10T14:54:06.127+0700 INFO instance/beat.go:830 Kibana dashboards successfully loaded.
> 2021-03-10T14:54:06.127+0700 INFO instance/beat.go:468 winlogbeat start running.
---
### Author:  [@GezimSejdiu](https://forum.opensearch.org/u/GezimSejdiu)
#### Post date: [March 10, 2021, 2:30pm UTC](https://forum.opensearch.org/t/imported-dashboard-cannot-be-seen/5284/2 "2021-03-10T14:30:02Z")
Hey @cavril ,
how you did install the winlogbeat? By following the guideline/steps on the Kibana UI? Did you use [winlogbeat-oss](https://www.elastic.co/downloads/beats/winlogbeat-oss) ? ODFE works (or at least has been tested to work) with oss-like versions of beats and logstash. Reg. the configuration you should also follow the guidelines here: [Troubleshoot - Open Distro Documentation](https://opendistro.github.io/for-elasticsearch-docs/docs/troubleshoot/#beats), mainly disable:
```nohighlight
setup.ilm.enabled: false
setup.ilm.check_exists: false
```
Maybe share your `winlogbeat.yml` so that we can help you with better troubleshooting.
Best,
Gezim
---
### Author:  [@cavril](https://forum.opensearch.org/u/cavril)
#### Post date: [March 11, 2021, 12:18am UTC](https://forum.opensearch.org/t/imported-dashboard-cannot-be-seen/5284/3 "2021-03-11T00:18:08Z")
Hi @GezimSejdiu ,
I was previously connecting this winlogbeat to another ELK (not Opendistro) and it worked perfectly, so i just changed the output to target opendistro.
I installed this one: [Winlogbeat](https://www.elastic.co/downloads/beats/winlogbeat)
> winlogbeat.event\_logs:
> - name: Application
> ignore\_older: 72h
>
> - name: System
>
> - name: Security
> event\_id: 4624, 4625, 4700-4800
> processors:
> - script:
> lang: javascript
> id: security
> file: ${path.home}/module/security/config/winlogbeat-security.js
>
> - name: Microsoft-Windows-Sysmon/Operational
> processors:
> - script:
> lang: javascript
> id: sysmon
> file: ${path.home}/module/sysmon/config/winlogbeat-sysmon.js
>
> - name: Windows PowerShell
> event\_id: 400, 403, 600, 800
> processors:
> - script:
> lang: javascript
> id: powershell
> file: ${path.home}/module/powershell/config/winlogbeat-powershell.js
>
> - name: Microsoft-Windows-PowerShell/Operational
> event\_id: 4103, 4104, 4105, 4106, 1149
> processors:
> - script:
> lang: javascript
> id: powershell
> file: ${path.home}/module/powershell/config/winlogbeat-powershell.js
>
> - name: Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational
> event\_id: 1149
> processors:
> - script:
> lang: javascript
> id: powershell
> file: ${path.home}/module/powershell/config/winlogbeat-powershell.js
>
> - name: ForwardedEvents
> tags: [forwarded]
> processors:
> - script:
> when.equals.winlog.channel: Security
> lang: javascript
> id: security
> file: ${path.home}/module/security/config/winlogbeat-security.js
> - script:
> when.equals.winlog.channel: Microsoft-Windows-Sysmon/Operational
> lang: javascript
> id: sysmon
> file: ${path.home}/module/sysmon/config/winlogbeat-sysmon.js
> - script:
> when.equals.winlog.channel: Windows PowerShell
> lang: javascript
> id: powershell
> file: ${path.home}/module/powershell/config/winlogbeat-powershell.js
> - script:
> when.equals.winlog.channel: Microsoft-Windows-PowerShell/Operational
> lang: javascript
> id: powershell
> file: ${path.home}/module/powershell/config/winlogbeat-powershell.js
>
> # ====================== Elasticsearch template settings =======================
>
> setup.template.settings:
> index.number\_of\_shards: 1
> #index.codec: best\_compression
> #\_source.enabled: false
>
> # ================================= Dashboards =================================
> setup.dashboards.enabled: true
> # =================================== Kibana ===================================
>
> setup.kibana:
> host: “[https://kibana:5601](https://kibana:5601)”
> username: “apikibana”
> password: “xxxxxxx”
> ssl.certificate\_authorities: [“C:/winlogbeat/cert/elasticsearch-ca.pem”]
> # ================================== Outputs ===================================
>
> # ---------------------------- Elasticsearch Output ----------------------------
> output.elasticsearch:
> #hosts: [“localhost:9200”]
> hosts: “10.10.X.X:9200”
> username: “xxxx”
> password: “xxxx”
>
> # ================================= Processors =================================
> processors:
> - add\_host\_metadata:
> when.not.contains.tags: forwarded
> #- add\_cloud\_metadata: ~
>
> # ================================== Logging ===================================
>
> logging.level: debug
---
### Author:  [@GezimSejdiu](https://forum.opensearch.org/u/GezimSejdiu)
#### Post date: [March 11, 2021, 10:01am UTC](https://forum.opensearch.org/t/imported-dashboard-cannot-be-seen/5284/4 "2021-03-11T10:01:23Z")
Hey @cavril ,
so, yes you are using the licensed one: License: [Elastic License](https://github.com/elastic/beats/tree/7.11/licenses/ELASTIC-LICENSE.txt) and not the one I just shared: [winlogbeat-oss](https://www.elastic.co/downloads/beats/winlogbeat-oss). I would suggest that you try to re-isntall winlogbeat using the oss version and also configure those settings I just shared above with you: [Troubleshoot - Open Distro Documentation](https://opendistro.github.io/for-elasticsearch-docs/docs/troubleshoot/#beats) and add them here:
```auto
# ---------------------------- Elasticsearch Output ----------------------------
output.elasticsearch:
#hosts: [“localhost:9200”]
hosts: “10.10.X.X:9200”
username: “xxxx”
password: “xxxx”
```
b.t.w when you say `hosts: “10.10.X.X:9200”` it will choose HTTP protocol, right? And ODFE by default is using HTTP(s) via TLS/SSL (of course with demo certificates).
I can’t reproduce this now but if I manage to find some more spare time, maybe I can give it a try.
---
### Author:  [@cavril](https://forum.opensearch.org/u/cavril)
#### Post date: [March 11, 2021, 10:16am UTC](https://forum.opensearch.org/t/imported-dashboard-cannot-be-seen/5284/5 "2021-03-11T10:16:02Z")
Thank you for for highlights between the licensing explanation.
My elasticsearch is not exposed with https and the http output is working perfectly.
I was able to create index pattern, dashboard but the publishing of the dashboard does not appear on Kibana.
So i am not sure about which role mapping or permission is required to be able to see them.
Kibana has internal and ldap authentication mechanism