Filebeat dashboard : No results found


(Durga Prasad) #1

Hi Team,
I have a 2 Servers ( one is EL and other is Kibana and filebeat ) both are Ubuntu Server 16.04 LTS.
I have installed Elasticsearch, Logstash in 1st Server. & Kibana, filebeat, metricbeat and packetbeat in the 2nd server, for “version’s = 5.0.2 DEB installation”.
I can see the log index in my Kibana discovery but when I switch to the tab filebeat-* it is showing me (No results found).

when i restart the filebeat service at that time for 5 to 10 min it is working fine, and later it is showing me (No results found).
Please help out on this issue.

Thanks,
Durgaprasad


(Tim Sullivan) #2

How often is Filebeat sending data to Elasticsearch? Can you verify the continuity of data by doing a search in Dev tools such as:

POST filebeat-*/_search
{
  "size": 10,
  "query": {
    "match_all": {}
  },
  "sort": [
    {
      "@timestamp": {
        "order": "desc"
      }
    }
  ]
}

And then look at the timestamps in the results.


(Durga Prasad) #3

Thank you for a reply.

Filebeat Issue is resolved there is a problem with my configurations, filebeat data do not sync with logstash, getting errors, I was checked log file issue is founded.

After I changed the below of configuration in logstash conf file issue is resolved.


sudo vi /etc/logstash/conf.d/logstash.conf

input {
beats {
port => "5044"
}
}

output {
elasticsearch {
hosts => "192.168.1.17:9200"
manage_template => false
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
}



(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.