Can't see documents in Kibana

Elastic Stack Elasticsearch
1

Hi,

I am sending documents into ES which look like:

{
   "took": 54,
   "timed_out": false,
   "_shards": {
      "total": 5,
      "successful": 5,
      "failed": 0
   },
   "hits": {
      "total": 3,
      "max_score": 1,
      "hits": [
         {
            "_index": "test_post-2017.04.06",
            "_type": "access",
            "_id": "AVtE4ZzCmDxIs2E8DcPR",
            "_score": 1,
            "_source": {
               "@timestamp": "2017-04-06T21:08:06.000Z",
               "pending": 0,
               "processing": 0,
               "event": "stats",
               "message": "stats from query"
            }
         },

I get a 'created' confirmation and I can search for the documents just fine (using /_search API) - they are there. However I cannot see these documents in Kibana in the index.

I suspect that the issue is with the @timestamp. But its not clear to me what the problem with the timestamp actually is. The timestamp syntax is exactly the same way as other documents going into the index from Logstash - and they are just fine and viewable in Kibana without issue.

These documents are not being created by Logstash - these documents are being created from a script I'm running.

The mapping has an @timestamp entry as 'datetimeOptional'.

Would appreciate any assistance. Thanks.

2

Can you elaborate on that, what do you mean, where aren't you seeing them?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.