Elasticsearch Can't load filebeat.template.json!
I follow this guide:https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-template.html
use the command load filebeat.template.json:
curl -XPUT -u elastic:changeme '192.168.10.51:9200/_template/filebeat' -H 'Content-Type: application/json' -d@/etc/filebeat/filebeat.template.json
I use elasticsearch.repo yum install elasticsearch,logstash,.kibana,and filebeat.
my os is CentOS6.9
we can see it in the graph,load filebeat.template.json succeed,but I can't get the json from elasticsearch.
who can help me? tks..
warkolm
May 2, 2017, 3:55am
2
It hasn't created any filebeat indices, is filebeat running?
filebeat is running.
warkolm
May 2, 2017, 6:08am
4
Please don't post pictures of text, they are difficult to read and some people may not be even able to see them.
steffens
May 9, 2017, 11:48am
5
I can't really read the screenshots on my screen. Can you copy'n paste the text? Use the </> button to format log output and text.
Have you also had a look at filebeat/logstash logs?
The template is not the index. An installed template is matched and applied to new indices being generated.
Are you sending events via logstash or directly to Elasticsearch? If you're using logstash, what's you filebeat and logstash configuration?
system
June 6, 2017, 11:59am
6
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
