winlogbeat / packetbeat: Sample Dashboards broken with ES 5.2

[jochen-st]

After upgradeing KIbana and Elasticsearch 5.2 from 5.1.2, the sample winlogbeat dashboards / visualizations provided from https://artifacts.elastic.co/downloads/beats/beats-dashboards/beats-dashboards-5.2.0.zip do not work anymore.

Kibana displays the following error:

Error: [illegal_argument_exception] [terms] exclude doesn't support values of type: START_OBJECT

The issue is likely caused by elastic/elasticsearch#22933

Fix is to replace

"exclude": {"pattern": "\"\""},

with

"exclude": "\"\"",

in the affected visualisations:
winlogbeat: Event-Levels.json and Evolution-of-the-CPU-times-per-process.json
packetbeat: NFS-errors.json

[jochen-st]

see https://github.com/jochen-st/beats/commit/068f0cbd243cf74d1f8008dd3b580e8648eb9b78 for possible fix

[tsg]

Closing as fixed.