So you got a remote and local to connect on a local subnet is that correct could you do a cross cluster search etc?
From local to remote is connected. But when I try to do a cross cluster search on devtools, I am getting "index not found exception" as shown below .
On LOCAL
GET /remote-kibana:filebeat-2023.10.05/_search
{
"query": {
"match": {
"host.name.keyword": "<<servername>>"
}
}
}
and output is
{
"error": {
"root_cause": [
{
"type": "index_not_found_exception",
"reason": "no such index [filebeat-2023.10.05]",
"index_uuid": "_na_",
"resource.type": "index_or_alias",
"resource.id": "filebeat-2023.10.05",
"index": "filebeat-2023.10.05"
}
],
"type": "index_not_found_exception",
"reason": "no such index [filebeat-2023.10.05]",
"index_uuid": "_na_",
"resource.type": "index_or_alias",
"resource.id": "filebeat-2023.10.05",
"index": "filebeat-2023.10.05"
},
"status": 404
}
And on REMOTE for the same index, I get the results.
GET /filebeat-2023.10.05/_search
{
"query": {
"match": {
"host.name.keyword": "<<servername>>"
}
}
}
and output is
{
"took": 1308,
"timed_out": false,
"_shards": {
"total": 1,
"successful": 1,
"skipped": 0,
"failed": 0
},
"hits": {
"total": {
"value": 10000,
"relation": "gte"
},
"max_score": 2.8521688,
"hits": [
{
"_index": "filebeat-2023.10.05",
"_id": "fZA1_YoB8kd8DQIYCFp2",
"_score": 2.8521688,
"_ignored": [
"event.original.keyword",
"message.keyword"
],
"_source": {
"event": {
"original": """2023-10-05 02:20:17,040 447179434 INFO MsgHandler7 Declared media; tenant=1, id=3694845, externalMediaId=\\<<servermame>>\Incoming\2023\10\05\10-04-2023_15-22-36_sid_2081654661_504.wav, uri=http://10.112.33.6:25022/tenant/1/media/354875 [correlationId=d526e31d-3ea0-47b8-ac9e-8affbce06b26] c.n.j.g.r.m.c.MediaCreationTask"""
},
"tags": [
"filebeat",
"beats_input_codec_plain_applied"
],
