Hi,
Im new to the elasticstack, so please bear with me.
I have created an elasticsearch template to create rolling indexes. I am then pushing data in, I can run
get sqltable/sqltable_size/_count
which returns:
{
"count": 2412,
"_shards": {
"total": 2,
"successful": 2,
"skipped": 0,
"failed": 0
}
}
If i run:
get sqltable/sqltable_size/_search?pretty
I get my data (subset below):
{
"took": 5,
"timed_out": false,
"_shards": {
"total": 2,
"successful": 2,
"skipped": 0,
"failed": 0
},
"hits": {
"total": 2792,
"max_score": 1,
"hits": [
{
"_index": "sqltable-2017.11.06",
"_type": "sqltable_size",
"_id": "AV-QqGmYWXBSsRxAMd4n",
"_score": 1,
"_source": {
"Time": {
"value": "/Date(1509960358118)/",
"DisplayHint": 2,
"DateTime": "06 November 2017 09:25:58"
},
"Server": "server1",
"Database": "Admin",
"Schema": "Index",
"Table": "DBlist",
"IndexSpaceUsed": 8,
"DataSpaceUsed": 8,
"RowCount": 11
}
},
When i try and load it into Kibana however..
First in management i add the index pattern, it all looks good to me, i can see my Server, Table etc fields:
However when i got to Discover it get no results
I thought it might be the time, but ive literally just ran it so setting time to 1 hour should collect every result.
Any ideas what i have done wrong to not load the data in?