Elasticsearch index creation

Elastic Stack Beats
1

I have problems with elasticsearch index creation with filebeat.
I installed all the other beats on ubuntu 19.04 server and all theese beats created the index in elasticsearch. I installed in the same way filebeat and the index has not been created.
I created manually the index using the command
filebeat setup --index-management -E output.logstash.enabled=false -E 'output.elasticsearch.hosts=["localhost:9200"]'
the index has been created but it rremains empty.

I'am not able to solve the problem.

2

Welcome! The index isn't created until the first time Filebeat writes to it, so it sounds like the problem you're encountering is that Filebeat is never (successfully) writing anything. There's several reasons this could be happening, for example it might not find any files matching its input pattern, it might be unable to connect to the elasticsearch server, etc. Could you share your configuration (filebeat.yml) and the output logs when you run Filebeat (they're probably in the same place as filebeat, in the logs/ subdirectory)?

3

Thanks a lot for your quick answer.
Now it works properly.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.