Issues with accessing Kibana default T-POT dashboard a few days after installation?

[mitcabbo]

Hi everyone, I am new here and decided to use T-POT to analyze attack information for a cybersecurity final project. A few days after initially installing T-POT on an Azure VM, I am seeing an Elastic "Create your first dashboard" screen instead of the previous T-POT default dashboard. Any ideas on what went wrong? I don't want to lose all the hundreds of thousands of data entries that were collected over the last few days. Thanks in advance!

[rootdump]

I am having the same issues. Have had tpot running for a few months and all working fine. I am now getting create your first dashboard and as yet have found no way of going back. Have you managed to find a way?

[mitcabbo]

I tried restarting T-POT using "systemctl restart tpot" - no luck.
I tried restarting the whole VM - no luck.
I checked my network settings to make sure my device was able to connect to the T-POT web UI - no luck.

I recently reached out to Elastic to see if they had any similar issues reported to them, seeing as their information was the only thing I could find on the Kibana dashboard page - no luck.

[rootdump]

Thanks for the reply. I am not sure what has happened. I have not changed any code and has been running perfect since the install. I don't really want to re-build the system but there may be no other option. I will try and fix and if I do I well let you know.

[mitcabbo]

We implemented this system for our final project due in three days and I am now left with nothing. I hope to hear back from someone soon. Good luck!

[rootdump]

Have fixed it. You need to download kibana.export.ndjson from https://github.com/telekom-security/tpotce/wiki/Import---Export-Kibana-Objects

Then go to kibana > stack management > Saved Objects > Import *Then import that file.

Mines now working.

[mitcabbo]

Mine is also now working. What the heck went wrong??

[DevmanusHere]

I tried systemctl restart tpot but i cannot make them up
please help