Filebeat's Data not showing in Kibana Dashboard

huzaifa224 · February 3, 2021, 11:55am

I have install ELK on ubuntu18.04 for monitoring remote server logs. On remote server i have installed Filebeat to send data to logstash. Remote server's logs are showing in Kibana-->observability-->logs. But in dashboad its showing No result found

Modules are enable in filebeat but still data not showing.

Can anyone help in this regards?

aaron-nimocks · February 4, 2021, 4:48pm

What modules do you have enabled? The dashboard you referenced that data usually comes from the Auditd Module.

Also I would check whichever log you are reading to ensure the right data you are expecting to see is there.

huzaifa224 · February 4, 2021, 8:59pm

I have enabled following modules in filebeat

apache
auditd
elasticsearch
kibana
logstash
system

aaron-nimocks · February 4, 2021, 10:47pm

Did you check your auditd logs to ensure it has the correct data being generated?

system · March 4, 2021, 10:48pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.