Data is indexed, but nothing came up in head :(


(Sanjay Reddy) #1

Hi,

I have indexed some data. When I check in Head plugin, nothing present in the name of that index. Don't know what to do..

The following screenshot shows the completions of indexing of logs

This is the configuration file that I have used

input
{
file
{
path => "Q:/sanjay/Splunk/DB/HCG/PatientsDropoutReport_apr14 till Date.psv"
type => "all"
start_position => "beginning"
}
}
filter
{
csv {
columns =>["PatientID","UHID","PATIENTNAME","GENDER","DB","AGE","ADDRESS","CITY","STATE","COUNTRY","MOBILENO","REGDATE","USERNAME","LOCATION","DOCTOR","REFDOCTOR","PatientID1"]
separator => "|"
}
grok
{
patterns_dir => "Q:/softwares/ElasticSearch/logstash-1.3.3-flatjar/patterns"

    match => ["REGDATE", "%{YEAR:al_year}/%{MONTHNUM:al_month}/%{MONTHDAY:al_monthday} %{TIME:al_time}" ]
    add_field => [ "LogTime", "%{al_year}/%{al_month}/%{al_monthday} %{al_time}" ]
}
date 
{
    match => [ "LogTime", "YYYY/MM/dd HH:mm"]
    
}
mutate 
{
	convert => ["PatientID", "integer"]
	convert => ["Age", "integer"]
}

}

output
{
elasticsearch_http
{
host => "localhost"
index => "A_DropOutPatients"
index_type => "A_DropOutPatients"
template => "Q:/softwares/ElasticSearch/logstash-1.3.3-flatjar/elasticsearch-template-A-DropOutPatients.json"
template_name => "A_DropOutPatients"
}
stdout
{
codec => "json"
debug => true
}

}

The following is the Head plugin screenshot

Please help :frowning:

Regards,
Sanjay Reddy


(Magnus B├Ąck) #2

But the Head plugin screenshot doesn't show the A_DropOutPatients index.


(Sanjay Reddy) #3

Thanks @magnusbaeck for the quick response.

That is what my problem is..!

The new index is not showing up in Head plugin.. Don't know why..:frowning:

Please help


(system) #4