https://docs.openshift.com/container-platform/4.7/logging/cluster-logging-deploying.html#cluster-logging-visualizer-indices_cluster-logging-deploying When a cluster is first created, if Logging is one of the initial things installed/deployed, there is not yet anything that will generate app logs. Similarly, audit isn't enabled by default, and no audit logs will be generated. Until these logs are generated, no indices for apps or audit will exist. This makes creating index _patterns_ for them impossible. There is a note about audit logs that does not make this clear, but no such note exists for app logs.
*** This bug has been marked as a duplicate of bug 1968576 ***