Filebeat data not being updated in Kibana

Elastic Stack Beats
1

/var/log/*.log is currently being fetched and rendered in Kibana, but after the initial timestamp for which the index was created, no changing of timestamps or refreshing seems to pull new data in.

I am new to this stack - surely missing something simple. The search filter is on Today and I've updated several times. No new data comes through.

Kibana only seems to see new Filebeat data when the Filebeat service is restarted.

Here is the filebeat.yml:

filebeat:
  prospectors:
    -
      paths:
        - /var/log/*.log
        - /var/log/messages
        - /var/log/secure
      input_type: log
      document_type: syslog
  registry_file: /var/lib/filebeat/registry
output:
  elasticsearch:
    hosts: ["localhost:9200"]
  logstash:
    hosts: ["localhost:5044"]
shipper:
logging:
  files:
2

Hi @kahn,

You should be seeing a continuous stream of data flowing in. Do you see any error in your Filebeat/Elasticsearch logs?

Best regards

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.