search

patschi / parsedmarc-dockerized

Dockerized self-initializing parsedmarc docker stack for lazy people
GNU General Public License v3.0
78 stars 21 forks source link

Trying to initialize aggs without index pattern in SPF Alignment Over Time and DKIM Alignment Over Time panels #23

Open gitterdoneplease opened 9 months ago

gitterdoneplease commented 9 months ago

Recently went to check on this great solution and my SPF Alignment Over Time and DKIM Alignment Over Time panels only show "Trying to initialize aggs without index pattern". I did a fresh install and this persists. Anything I can do to fix it?

Thank you.

gitterdoneplease commented 9 months ago

I tried updating Kibana and Elasticsearch to the latest and now the error on both reads "Could not find the data view: -"

patschi commented 9 months ago

I can reproduce the same on new setups, but honestly I'm not sure what that means or what's causing it. I'd expect the dashboard being imported fine. So maybe some compatibility mismatch/bug in parsedmarc's dashboard or some bug in kibana itself. I'm not sure if it's worth asking in the original project's GitHub repo?

csjoh commented 8 months ago

Just wanted to chime in that I have the same issue - Was running kibana/elasticsearch 7.16.something, updated to 7.17.18, still got "Trying to initialize aggs without index pattern". Upgraded kibana and elasticsearch to 8.12.2 and I now have the world map visible, which I didn't before, but SPF/DKIM Alignment over time now both give me "Could not find the data view: -".

Is there an updated version of the dashboard that I need to import?

hgrebenstein commented 8 months ago

Same issue here after my first install. Also 1 "Unrecognized layerType EMS_VECTOR_TILE".

Since I'm "only a user": is there any instruction how to do the Kibana/elastic update?

csjoh commented 8 months ago

Same issue here after my first install. Also 1 "Unrecognized layerType EMS_VECTOR_TILE".

Since I'm "only a user": is there any instruction how to do the Kibana/elastic update?

I just changed the version tags in the docker-compose.yml file from 7.17.18 to 8.12.2, followed by a docker-compose down && docker-compose pull && docker-compose up -d. I'm not sure if the pull was strictly necessary, but I prefer to err on the side of caution.

That gave me the map, but the SPF/DKIM alignment over time graphs are still missing. They're not super critical, but it would be nice to have them.

csjoh commented 8 months ago

I just hit shift-ctrl-R in the wrong window and hard refreshed the kibana dashboard instead of what I intended to refresh, and now the SPF/DKIM alignment over time graphs show. I now feel stupid that I didn't try that before...

This was on my home computer running Linux Mint, however, on my work computer running Windows, this didn't work and I am a bit confused as to why.

hgrebenstein commented 8 months ago

I had trouble with the re-compose. Did a full re-install on a fresh Ubuntu with a modified docker-compose-yml using 8.12.2 and now there's everything showing.