Filebeat import dashboards fails internal server error on some dashboards

[liza-mae]

For confirmed bugs, please report:

• Version: master, 7.x
• Operating System: Linux
• Steps to Reproduce:
  ./filebeat setup

05:18:58 Exiting: Failed to import dashboard: Failed to load directory /home/vagrant/filebeat-7.16.0-SNAPSHOT-linux-x86_64/kibana/7:
05:18:58   error loading /home/vagrant/filebeat-7.16.0-SNAPSHOT-linux-x86_64/kibana/7/dashboard/15503340-4488-11ea-ad63-791a5dc86f10.json: error dashboard asset: returned 200 to import file: 1 error: error: unknown, asset ID=513a3d70-4482-11ea-ad63-791a5dc86f10; asset type=map; references=[]. Response: {"successCount":5,"success":false,"warnings":[],"successResults":[{"type":"visualization","id":"247e2990-4699-11ea-ad63-791a5dc86f10","meta":{"title":"S3 Bucket Name Filter [Filebeat AWS]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"75853f20-4484-11ea-ad63-791a5dc86f10","meta":{"title":"VPC Flow Top IP Addresses [Filebeat AWS]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"bad8c910-4485-11ea-ad63-791a5dc86f10","meta":{"title":"VPC Flow Total Requests [Filebeat AWS]","icon":"visualizeApp"},"overwrite":true},{"type":"search","id":"c1aee600-4487-11ea-ad63-791a5dc86f10","meta":{"title":"VPC Flow Reject Logs [Filebeat AWS]","icon":"discoverApp"},"overwrite":true},{"type":"dashboard","id":"15503340-4488-11ea-ad63-791a5dc86f10","meta":{"title":"[Filebeat AWS] VPC Flow Log Overview","icon":"dashboardApp"},"overwrite":true}],"errors":[{"id":"513a3d70-4482-11ea-ad63-791a5dc86f10","type":"map","title":"VPC Flow Action Geo Location[Filebeat AWS]","meta":{"title":"VPC Flow Action Geo Location[Filebeat AWS]","icon":"gisApp"},"error":{"error":"Internal Server Error","message":"Unexpected bulk response [400] mapper_parsing_exception: failed to parse field [map.layerListJSON] of type [text] in document with id 'map:513a3d70-4482-11ea-ad63-791a5dc86f10'. Preview of field's value: '{visible=true, maxZoom=24, alpha=1, minZoom=0, sourceDescriptor={isAutoSelect=true, type=EMS_TMS}, style={}, id=842c201e-96d7-413d-8688-de5ee4f8a1e0, label=null, type=VECTOR_TILE}'","statusCode":500,"type":"unknown"}}]}
05:18:58   error loading /home/vagrant/filebeat-7.16.0-SNAPSHOT-linux-x86_64/kibana/7/dashboard/3af47420-3e7b-11ea-bb0a-69c3ca1d410f.json: error dashboard asset: returned 200 to import file: 1 error: error: unknown, asset ID=0edf0640-3e7e-11ea-bb0a-69c3ca1d410f; asset type=map; references=[]. Response: {"successCount":9,"success":false,"warnings":[],"successResults":[{"type":"visualization","id":"76af8140-3e84-11ea-bb0a-69c3ca1d410f","meta":{"title":"ELB Inbound Traffic [Filebeat AWS] ECS","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"73970bc0-3e86-11ea-bb0a-69c3ca1d410f","meta":{"title":"ELB Top User Agents [Filebeat AWS] ECS","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"e50c51e0-3e7f-11ea-bb0a-69c3ca1d410f","meta":{"title":"ELB Total Requests [Filebeat AWS] ECS","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"ceb7c030-3e86-11ea-bb0a-69c3ca1d410f","meta":{"title":"ELB Top IP Addresses [Filebeat AWS] ECS","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"bd37d720-3e84-11ea-bb0a-69c3ca1d410f","meta":{"title":"ELB Outbound Traffic [Filebeat AWS] ECS","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"219c1850-3e82-11ea-bb0a-69c3ca1d410f","meta":{"title":"ELB HTTP 2xx [Filebeat AWS] ECS","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"b6a308f0-3e82-11ea-bb0a-69c3ca1d410f","meta":{"title":"ELB HTTP 4xx [Filebeat AWS] ECS","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"d8b1e830-3e82-11ea-bb0a-69c3ca1d410f","meta":{"title":"ELB HTTP 5xx [Filebeat AWS] ECS","icon":"visualizeApp"},"overwrite":true},{"type":"dashboard","id":"3af47420-3e7b-11ea-bb0a-69c3ca1d410f","meta":{"title":"[Filebeat AWS] ELB Access Log Overview","icon":"dashboardApp"},"overwrite":true}],"errors":[{"id":"0edf0640-3e7e-11ea-bb0a-69c3ca1d410f","type":"map","title":"ELB Requests Geolocation [Filebeat AWS] ECS","meta":{"title":"ELB Requests Geolocation [Filebeat AWS] ECS","icon":"gisApp"},"error":{"error":"Internal Server Error","message":"Unexpected bulk response [400] mapper_parsing_exception: failed to parse field [map.layerListJSON] of type [text] in document with id 'map:0edf0640-3e7e-11ea-bb0a-69c3ca1d410f'. Preview of field's value: '{visible=true, maxZoom=24, alpha=1, minZoom=0, sourceDescriptor={isAutoSelect=true, type=EMS_TMS}, style={}, id=19047c4c-18d7-4aec-b0ce-98de2828244d, label=Hits, type=VECTOR_TILE}'","statusCode":500,"type":"unknown"}}]}
05:18:58   error loading /home/vagrant/filebeat-7.16.0-SNAPSHOT-linux-x86_64/kibana/7/dashboard/6576c480-73a2-11ea-a345-f985c61fe654.json: error dashboard asset: returned 200 to import file: 1 error: error: unknown, asset ID=a97de660-73a5-11ea-a345-f985c61fe654; asset type=map; references=[]. Response: {"successCount":7,"success":false,"warnings":[],"successResults":[{"type":"search","id":"d88364c0-73a1-11ea-a345-f985c61fe654","meta":{"title":"Audit [Filebeat GCP]","icon":"discoverApp"},"overwrite":true},{"type":"visualization","id":"4627efa0-73a2-11ea-a345-f985c61fe654","meta":{"title":"Audit Events Outcome over time [Filebeat GCP]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"eb5bf570-73a2-11ea-a345-f985c61fe654","meta":{"title":"Audit Event Action [Filebeat GCP]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"33ee1320-73a5-11ea-a345-f985c61fe654","meta":{"title":"Audit Top User Email [Filebeat GCP]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"a8e40240-73a3-11ea-a345-f985c61fe654","meta":{"title":"Audit User Agent [Filebeat GCP]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"6d90d320-73a4-11ea-a345-f985c61fe654","meta":{"title":"Audit Resource Name [Filebeat GCP]","icon":"visualizeApp"},"overwrite":true},{"type":"dashboard","id":"6576c480-73a2-11ea-a345-f985c61fe654","meta":{"title":"[Filebeat GCP] Audit","icon":"dashboardApp"},"overwrite":true}],"errors":[{"id":"a97de660-73a5-11ea-a345-f985c61fe654","type":"map","title":"Audit Source Locations [Filebeat GCP]","meta":{"title":"Audit Source Locations [Filebeat GCP]","icon":"gisApp"},"error":{"error":"Internal Server Error","message":"Unexpected bulk response [400] mapper_parsing_exception: failed to parse field [map.layerListJSON] of type [text] in document with id 'map:a97de660-73a5-11ea-a345-f985c61fe654'. Preview of field's value: '{visible=true, maxZoom=24, alpha=1, minZoom=0, sourceDescriptor={isAutoSelect=true, type=EMS_TMS}, style={}, id=866b5ce1-6ca0-47db-a6f2-54c5e0dcd2f0, label=null, type=VECTOR_TILE}'","statusCode":500,"type":"unknown"}}]}
05:18:58   error loading /home/vagrant/filebeat-7.16.0-SNAPSHOT-linux-x86_64/kibana/7/dashboard/749203a0-67b1-11ea-a76f-bf44814e437d.json: error dashboard asset: returned 200 to import file: 1 error: error: unknown, asset ID=281ca660-67b1-11ea-a76f-bf44814e437d; asset type=map; references=[]. Response: {"successCount":6,"success":false,"warnings":[],"successResults":[{"type":"visualization","id":"545d6a00-67ae-11ea-a76f-bf44814e437d","meta":{"title":"Event Outcome [Filebeat Okta]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"7c6ec080-67c6-11ea-a76f-bf44814e437d","meta":{"title":"Transaction Types [Filebeat Okta]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"cda883a0-67c6-11ea-a76f-bf44814e437d","meta":{"title":"Time Series [Filebeat Okta]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"0a784b30-67c7-11ea-a76f-bf44814e437d","meta":{"title":"Actor Types [Filebeat Okta]","icon":"visualizeApp"},"overwrite":true},{"type":"search","id":"21028750-67ca-11ea-a76f-bf44814e437d","meta":{"title":"Okta Failure Events","icon":"discoverApp"},"overwrite":true},{"type":"dashboard","id":"749203a0-67b1-11ea-a76f-bf44814e437d","meta":{"title":"[Filebeat Okta] Overview","icon":"dashboardApp"},"overwrite":true}],"errors":[{"id":"281ca660-67b1-11ea-a76f-bf44814e437d","type":"map","title":"Geolocation [Filebeat Okta]","meta":{"title":"Geolocation [Filebeat Okta]","icon":"gisApp"},"error":{"error":"Internal Server Error","message":"Unexpected bulk response [400] mapper_parsing_exception: failed to parse field [map.layerListJSON] of type [text] in document with id 'map:281ca660-67b1-11ea-a76f-bf44814e437d'. Preview of field's value: '{visible=true, maxZoom=24, alpha=1, minZoom=0, sourceDescriptor={isAutoSelect=true, type=EMS_TMS}, style={}, id=6908e81b-1695-4445-aee4-8bc8c9f65600, label=null, type=VECTOR_TILE}'","statusCode":500,"type":"unknown"}}]}
05:18:58   error loading /home/vagrant/filebeat-7.16.0-SNAPSHOT-linux-x86_64/kibana/7/dashboard/9c09cd20-7399-11ea-a345-f985c61fe654.json: error dashboard asset: returned 200 to import file: 1 error: error: unknown, asset ID=dae24080-739a-11ea-a345-f985c61fe654; asset type=map; references=[]. Response: {"successCount":8,"success":false,"warnings":[],"successResults":[{"type":"search","id":"30ccde50-7397-11ea-a345-f985c61fe654","meta":{"title":"CloudTrail Events [Filebeat AWS]","icon":"discoverApp"},"overwrite":true},{"type":"visualization","id":"4c23e4c0-739a-11ea-a345-f985c61fe654","meta":{"title":"CloudTrail Event Outcome over time [Filebeat AWS]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"396089c0-7399-11ea-a345-f985c61fe654","meta":{"title":"CloudTrail Actions [Filebeat AWS]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"0f056420-739e-11ea-a345-f985c61fe654","meta":{"title":"CloudTrail Event Type [Filebeat AWS]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"7bca4f50-739c-11ea-a345-f985c61fe654","meta":{"title":"CloudTrail User Agents [Filebeat AWS]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"f8b63860-739e-11ea-a345-f985c61fe654","meta":{"title":"CloudTrail Error Code [Filebeat AWS]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"8ec43590-739b-11ea-a345-f985c61fe654","meta":{"title":"CloudTrail Top User IDs [Filebeat AWS]","icon":"visualizeApp"},"overwrite":true},{"type":"dashboard","id":"9c09cd20-7399-11ea-a345-f985c61fe654","meta":{"title":"[Filebeat AWS] CloudTrail","icon":"dashboardApp"},"overwrite":true}],"errors":[{"id":"dae24080-739a-11ea-a345-f985c61fe654","type":"map","title":"CloudTrail Source Location [Filebeat AWS]","meta":{"title":"CloudTrail Source Location [Filebeat AWS]","icon":"gisApp"},"error":{"error":"Internal Server Error","message":"Unexpected bulk response [400] mapper_parsing_exception: failed to parse field [map.layerListJSON] of type [text] in document with id 'map:dae24080-739a-11ea-a345-f985c61fe654'. Preview of field's value: '{visible=true, maxZoom=24, alpha=1, minZoom=0, sourceDescriptor={isAutoSelect=true, type=EMS_TMS}, style={}, id=2c7b49fb-3fb5-4e18-b27f-fabe930971f3, label=null, type=VECTOR_TILE}'","statusCode":500,"type":"unknown"}}]}
05:18:58   error loading /home/vagrant/filebeat-7.16.0-SNAPSHOT-linux-x86_64/kibana/7/dashboard/Filebeat-O365-Audit.json: error dashboard asset: returned 200 to import file: 1 error: error: unknown, asset ID=dbae13c0-685c-11ea-8d6a-292ef5d68366; asset type=map; references=[]. Response: {"successCount":7,"success":false,"warnings":[],"successResults":[{"type":"search","id":"fdc14020-6859-11ea-8d6a-292ef5d68366","meta":{"title":"Audit Events [Filebeat O365]","icon":"discoverApp"},"overwrite":true},{"type":"visualization","id":"0be1adb0-6860-11ea-8d6a-292ef5d68366","meta":{"title":"Audit Event Count [Filebeat o365]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"8b033510-685a-11ea-8d6a-292ef5d68366","meta":{"title":"Events Histogram [Filebeat o365]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"d43c95a0-6864-11ea-8d6a-292ef5d68366","meta":{"title":"Audit Event Type [Filebeat o365]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"897d0c70-6869-11ea-8d6a-292ef5d68366","meta":{"title":"Top Authentication Failures [Filebeat o365]","icon":"visualizeApp"},"overwrite":true},{"type":"search","id":"8b8e5a10-6886-11ea-8d6a-292ef5d68366","meta":{"title":"Data Loss Prevention [Filebeat o365]","icon":"discoverApp"},"overwrite":true},{"type":"dashboard","id":"712e2c00-685d-11ea-8d6a-292ef5d68366","meta":{"title":"[Filebeat o365] Audit Dashboard ECS","icon":"dashboardApp"},"overwrite":true}],"errors":[{"id":"dbae13c0-685c-11ea-8d6a-292ef5d68366","type":"map","title":"Client Geo Map [Filebeat o365 audit]","meta":{"title":"Client Geo Map [Filebeat o365 audit]","icon":"gisApp"},"error":{"error":"Internal Server Error","message":"Unexpected bulk response [400] mapper_parsing_exception: failed to parse field [map.layerListJSON] of type [text] in document with id 'map:dbae13c0-685c-11ea-8d6a-292ef5d68366'. Preview of field's value: '{visible=true, maxZoom=24, alpha=1, minZoom=0, sourceDescriptor={isAutoSelect=true, type=EMS_TMS}, style={}, id=0b910b6c-77c8-4223-892a-1ebf69b0ccb4, label=null, type=VECTOR_TILE}'","statusCode":500,"type":"unknown"}}]}
05:18:58   error loading /home/vagrant/filebeat-7.16.0-SNAPSHOT-linux-x86_64/kibana/7/dashboard/Filebeat-threatintel-anomali.json: error dashboard asset: returned 200 to import file: 1 error: error: unknown, asset ID=ec5aa090-df42-11eb-8f2b-753caedf727d; asset type=map; references=[]. Response: {"successCount":22,"success":false,"warnings":[],"successResults":[{"type":"lens","id":"bfd2bfe0-de97-11eb-8f2b-753caedf727d","meta":{"title":"Anomali Indicator Confidence [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"9a61edc0-de93-11eb-8f2b-753caedf727d","meta":{"title":"Anomali Indicators [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"021ba940-de96-11eb-8f2b-753caedf727d","meta":{"title":"Anomali Indicator Type [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"3c40f4d0-de97-11eb-8f2b-753caedf727d","meta":{"title":"Anomali Detailed Indicator Type [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"bd28cb00-de96-11eb-8f2b-753caedf727d","meta":{"title":"Anomali Indicator Severity [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"f5f18940-de96-11eb-8f2b-753caedf727d","meta":{"title":"Anomali Indicator TLP Marking [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"c91fcd10-de95-11eb-8f2b-753caedf727d","meta":{"title":"Anomali Indicator Provider [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"36f61650-de96-11eb-8f2b-753caedf727d","meta":{"title":"Anomali Indicator Classification [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"1d7a18c0-df54-11eb-8f2b-753caedf727d","meta":{"title":"Anomali Data Source [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"d991e510-de96-11eb-8f2b-753caedf727d","meta":{"title":"Anomali Indicator State [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"f52a9720-de93-11eb-8f2b-753caedf727d","meta":{"title":"Anomali Email Indicator [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"8a6f7b20-de94-11eb-8f2b-753caedf727d","meta":{"title":"Anomali URL Indicators [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"ae5934e0-de94-11eb-8f2b-753caedf727d","meta":{"title":"Anomali Domain Indicators [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"5ef7b430-de94-11eb-8f2b-753caedf727d","meta":{"title":"Anomali IP Indicator [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"976620a0-de98-11eb-8f2b-753caedf727d","meta":{"title":"Anomali MD5 Hash Indicators [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"aac00bc0-de98-11eb-8f2b-753caedf727d","meta":{"title":"Anomali SHA1 Hash Indicators [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"7ec83f60-de98-11eb-8f2b-753caedf727d","meta":{"title":"Anomali SHA256 Hash Indicators [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"7d9c70f0-de95-11eb-8f2b-753caedf727d","meta":{"title":"Anomali Indicator Name [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"9c78ade0-de95-11eb-8f2b-753caedf727d","meta":{"title":"Anomali Indicator Description [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"e5f07800-de94-11eb-8f2b-753caedf727d","meta":{"title":"Anomali Indicator ID [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"lens","id":"1136ceb0-de95-11eb-8f2b-753caedf727d","meta":{"title":"Anomali URI [Filebeat Threat Intel]","icon":"lensApp"},"overwrite":true},{"type":"dashboard","id":"68c48a30-739e-11eb-a3e3-b3cc7c78a70f","meta":{"title":"[Filebeat Threat Intel] Anomali","icon":"dashboardApp"},"overwrite":true}],"errors":[{"id":"ec5aa090-df42-11eb-8f2b-753caedf727d","type":"map","title":"Anomali Indicator Geographic Location [Filebeat Threat Intel]","meta":{"title":"Anomali Indicator Geographic Location [Filebeat Threat Intel]","icon":"gisApp"},"error":{"error":"Internal Server Error","message":"Unexpected bulk response [400] mapper_parsing_exception: failed to parse field [map.layerListJSON] of type [text] in document with id 'map:ec5aa090-df42-11eb-8f2b-753caedf727d'. Preview of field's value: '{visible=true, maxZoom=24, alpha=1, minZoom=0, sourceDescriptor={isAutoSelect=true, type=EMS_TMS}, style={type=TILE}, id=9027343a-f725-4467-9b08-8566ad0b2a52, label=null, type=VECTOR_TILE}'","statusCode":500,"type":"unknown"}}]}
05:18:58   error loading /home/vagrant/filebeat-7.16.0-SNAPSHOT-linux-x86_64/kibana/7/dashboard/Filebeat-threatintel-malwarebazaar.json: error dashboard asset: returned 200 to import file: 1 error: error: unknown, asset ID=63365b50-82aa-11eb-ac13-d5ca87cb8fa2; asset type=map; references=[]. Response: {"successCount":15,"success":false,"warnings":[],"successResults":[{"type":"visualization","id":"f91e9620-82a8-11eb-ac13-d5ca87cb8fa2","meta":{"title":"Malware Bazaar Tags [Filebeat Threat Intel]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"d22c1090-82a5-11eb-ac13-d5ca87cb8fa2","meta":{"title":"Malware Bazaar File MIME Type [Filebeat Threat Intel]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"737d4f30-82ac-11eb-ac13-d5ca87cb8fa2","meta":{"title":"Malware Bazaar Indicators [Filebeat Threat Intel]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"8b2a64a0-82a8-11eb-ac13-d5ca87cb8fa2","meta":{"title":"Malware Bazaar File Extensions [Filebeat Threat Intel]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"c7d5db50-82a8-11eb-ac13-d5ca87cb8fa2","meta":{"title":"Malware Bazaar Indicator Provider [Filebeat Threat Intel]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"bc4790b0-82aa-11eb-ac13-d5ca87cb8fa2","meta":{"title":"Malware Bazaar Downloads [Filebeat Threat Intel]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"dbd199d0-82aa-11eb-ac13-d5ca87cb8fa2","meta":{"title":"Malware Bazaar Uploads [Filebeat Threat Intel]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"7cbe5900-82ab-11eb-ac13-d5ca87cb8fa2","meta":{"title":"Malware Bazaar Indicator First Seen [Filebeat Threat Intel]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"786546d0-82a5-11eb-ac13-d5ca87cb8fa2","meta":{"title":"Malware Bazaar TLSH Hashes [Filebeat Threat Intel]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"7546ac40-82a6-11eb-ac13-d5ca87cb8fa2","meta":{"title":"Malware Bazaar ssdeep Hashes [Filebeat Threat Intel]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"21ff17c0-82a6-11eb-ac13-d5ca87cb8fa2","meta":{"title":"Malware Bazaar MD5 Hashes [Filebeat Threat Intel]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"142fb6c0-82a8-11eb-ac13-d5ca87cb8fa2","meta":{"title":"Malware Bazaar SHA1 Hashes [Filebeat Threat Intel]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"5b4877b0-82a6-11eb-ac13-d5ca87cb8fa2","meta":{"title":"Malware Bazaar SHA256 Hashes [Filebeat Threat Intel]","icon":"visualizeApp"},"overwrite":true},{"type":"visualization","id":"1d8002d0-82a7-11eb-ac13-d5ca87cb8fa2","meta":{"title":"Malware Bazaar Import Table Hashes [Filebeat Threat Intel]","icon":"visualizeApp"},"overwrite":true},{"type":"dashboard","id":"dee7be00-82ab-11eb-ac13-d5ca87cb8fa2","meta":{"title":"[Filebeat Threat Intel] Malware Bazaar","icon":"dashboardApp"},"overwrite":true}],"errors":[{"id":"63365b50-82aa-11eb-ac13-d5ca87cb8fa2","type":"map","title":"Indicator Origin Country [Filebeat Threat Intel]","meta":{"title":"Indicator Origin Country [Filebeat Threat Intel]","icon":"gisApp"},"error":{"error":"Internal Server Error","message":"Unexpected bulk response [400] mapper_parsing_exception: failed to parse field [map.layerListJSON] of type [text] in document with id 'map:63365b50-82aa-11eb-ac13-d5ca87cb8fa2'. Preview of field's value: '{visible=true, maxZoom=24, alpha=1, minZoom=0, sourceDescriptor={isAutoSelect=true, type=EMS_TMS}, style={type=TILE}, id=ea2479ec-b43e-4377-a068-91d93265081d, label=null, type=VECTOR_TILE}'","statusCode":500,"type":"unknown"}}]}

[elasticmachine]

Pinging @elastic/integrations (Team:Integrations)

[elasticmachine]

Pinging @elastic/agent (Team:Agent)

[liza-mae]

@kvch can you take a look?

[liza-mae]

Can we get this on the radar? Thanks.

[elasticmachine]

Pinging @elastic/elastic-agent-data-plane (Team:Elastic-Agent-Data-Plane)

[andresrc]

@kvch can this be related to the migration to saved objects?