# Configure an index pattern on CentOS 7

**URL:** <https://discuss.elastic.co/t/configure-an-index-pattern-on-centos-7/89844>\
**Category:** Logstash\
**Created:** [June 18, 2017, 11:17am UTC](https://discuss.elastic.co/t/configure-an-index-pattern-on-centos-7/89844 "2017-06-18T11:17:36Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![hack3rcon](https://avatars.discourse-cdn.com/v4/letter/h/96bed5/32.png) [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\
**Post date:** [June 18, 2017, 11:17am UTC](https://discuss.elastic.co/t/configure-an-index-pattern-on-centos-7/89844/1 "2017-06-18T11:17:36Z")

</div>

Hello.  
I installed "Elasticsearch", "Logstash" and "Kibana" on CentOS 7 x64. I want forwarding Windows OS log to my CentOS server and my configurations are:

```auto
$ cat /etc/syslog-ng/syslog-ng.conf

options {
        flush_lines (0);
        time_reopen (10);
        log_fifo_size (1000);
        long_hostnames (off);
        use_dns (no);
        use_fqdn (no);
        create_dirs (no);
        keep_hostname (yes);
        ts_format(iso);
		encoding(UTF-8);
};

source s_netsyslog {
        udp(ip(0.0.0.0) port(514) flags(no-hostname));
        tcp(ip(0.0.0.0) port(514) flags(no-hostname));
};

destination d_netsyslog { file("/var/log/network.log" owner("root") group("root") perm(0644)); };

log { source(s_netsyslog); destination(d_netsyslog); };
```

```auto
$ cat /etc/logstash/conf.d/logstash.conf

input {
  generator {
  }
}

filter {
}

output {
  elasticsearch {
    protocol => "node"
    host => "host.domain.com"   
    cluster => "elasticsearch"
  }
}
```

When I open "Kibana" then it show me a page " ![](https://us1.discourse-cdn.com/elastic/original/3X/0/1/015a1aa325b4a959a700abb26092d1221ad3b969.png)  
What is it? Can it because of my configuration?  
If I change "Logstash" configuration to:

```auto
input {
  file {
    path => ["/var/log/network.log"]
    sincedb_path => "/var/log/logstash"
    start_position => "beginning"
    type => "syslog"
    tags => ["netsyslog"]
  }
}
```

Thank you.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 18, 2017, 11:27am UTC](https://discuss.elastic.co/t/configure-an-index-pattern-on-centos-7/89844/2 "2017-06-18T11:27:59Z")

</div>

You've got a number of threads with various different questions open at the moment and it's making it really hard to understand what you are doing and what your problems are.

We're happy to help but it would be much easier if you just picked a single thread 🙂

---

<div class="post-metadata">

**Author:** ![hack3rcon](https://avatars.discourse-cdn.com/v4/letter/h/96bed5/32.png) [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\
**Post date:** [June 18, 2017, 12:51pm UTC](https://discuss.elastic.co/t/configure-an-index-pattern-on-centos-7/89844/3 "2017-06-18T12:51:53Z")

</div>

I like to forward windows logs to my Linux logs.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 16, 2017, 12:51pm UTC](https://discuss.elastic.co/t/configure-an-index-pattern-on-centos-7/89844/4 "2017-07-16T12:51:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.