Centralized Kibana to fetch logstash data from multiple DC

Elastic Stack Kibana
21

So you got a remote and local to connect on a local subnet is that correct could you do a cross cluster search etc?

From local to remote is connected. But when I try to do a cross cluster search on devtools, I am getting "index not found exception" as shown below .

On LOCAL

GET /remote-kibana:filebeat-2023.10.05/_search
{
  "query": {
    "match": {
      "host.name.keyword": "<<servername>>"
    }
  }
}

and output is

{
  "error": {
    "root_cause": [
      {
        "type": "index_not_found_exception",
        "reason": "no such index [filebeat-2023.10.05]",
        "index_uuid": "_na_",
        "resource.type": "index_or_alias",
        "resource.id": "filebeat-2023.10.05",
        "index": "filebeat-2023.10.05"
      }
    ],
    "type": "index_not_found_exception",
    "reason": "no such index [filebeat-2023.10.05]",
    "index_uuid": "_na_",
    "resource.type": "index_or_alias",
    "resource.id": "filebeat-2023.10.05",
    "index": "filebeat-2023.10.05"
  },
  "status": 404
}

And on REMOTE for the same index, I get the results.


GET /filebeat-2023.10.05/_search
{
  "query": {
    "match": {
      "host.name.keyword": "<<servername>>"
    }
  }
}

and output is

{
  "took": 1308,
  "timed_out": false,
  "_shards": {
    "total": 1,
    "successful": 1,
    "skipped": 0,
    "failed": 0
  },
  "hits": {
    "total": {
      "value": 10000,
      "relation": "gte"
    },
    "max_score": 2.8521688,
    "hits": [
      {
        "_index": "filebeat-2023.10.05",
        "_id": "fZA1_YoB8kd8DQIYCFp2",
        "_score": 2.8521688,
        "_ignored": [
          "event.original.keyword",
          "message.keyword"
        ],
        "_source": {
          "event": {
            "original": """2023-10-05 02:20:17,040	447179434	INFO  	MsgHandler7    	Declared media; tenant=1, id=3694845, externalMediaId=\\<<servermame>>\Incoming\2023\10\05\10-04-2023_15-22-36_sid_2081654661_504.wav, uri=http://10.112.33.6:25022/tenant/1/media/354875	[correlationId=d526e31d-3ea0-47b8-ac9e-8affbce06b26]	c.n.j.g.r.m.c.MediaCreationTask"""
          },
          "tags": [
            "filebeat",
            "beats_input_codec_plain_applied"
          ],