# Ghost index unable to populate itself under '\_docs' | functionbeat

**URL:** <https://discuss.elastic.co/t/ghost-index-unable-to-populate-itself-under-docs-functionbeat/195873>\
**Category:** Beats\
**Tags:** functionbeat\
**Created:** [August 20, 2019, 9:25am UTC](https://discuss.elastic.co/t/ghost-index-unable-to-populate-itself-under-docs-functionbeat/195873 "2019-08-20T09:25:01Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![asad\_ali](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/asad_ali/32/47894_2.png) [@asad\_ali](https://discuss.elastic.co/u/asad_ali)\
**Post date:** [August 20, 2019, 9:25am UTC](https://discuss.elastic.co/t/ghost-index-unable-to-populate-itself-under-docs-functionbeat/195873/1 "2019-08-20T09:25:02Z")

</div>

I'm using functionbeat 7.1, and after great pain and countless night i was able to deploy 'function'. The inbuilt tutorial is very insufficient for development setups, as it lacks 'in-between' setups/details and configuration.

For e.g i had to add env variable ENABLED\_FUNCTONS to name of function name given in functions.yml to make it work.

My uncommented \*.yml looks like

```
functionbeat.provider.aws.functions:
  - name: fun-aws
    enabled: true
    type: cloudwatch_logs
    description: "lambda function for cloudwatch logs"

    concurrency: 5
    fields:
      env: staging
    triggers:
      - log_group_name: nix-msg
      - log_group_name: yum
      - log_group_name: ssh
        filter_pattern: i-01_
 ## - name: kinesis
setup.template.settings:
  index.number_of_shards: 1
setup.kibana:
  host: "illumin8.inboxbiz.com:5601"
  protocol: "https"
  username: "kibana"
  password: "elk#123"
output.elasticsearch:
  hosts: ["10.27.0.4:9200"]
  protocol: "http"
  username: "elastic"
  password: " ****"
 setup.template.fields: "/root/functionbeat-7.1.1-linux-x86_64/fields.yml"
processors:
  - add_host_metadata: ~
  - add_cloud_metadata: ~
logging.level: debug

```

_I run ./functionbeat deploy_

I get successful message

**i run setup i get**

> 2019-08-20T09:14:57.357Z ERROR instance/beat.go:802 Exiting: Failed to import dashboard: The directory /root/functionbeat-7.1.1-linux-x86\_64/kibana/7/dashboard is empty, nothing to import  
> Exiting: Failed to import dashboard: The directory /root/functionbeat-7.1.1-linux-x86\_64/kibana/7/dashboard is empty, nothing to import

although indices are made i can verify with curl command.

Now the **part of ghost indices** is when i run ./logstash  
I'm getting data on cli as

> [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":20,"time":{"ms":20}},"total":{"ticks":40,"time":{"ms":46},"value":40},"user":{"ticks":20,"time":{"ms":26}}},"handles":{"limit":{"hard":1048576,"soft":1024},"open":7},"info":{"ephemeral\_id":"b3548f52-9c8b-4676-9c2a-d384c3d313cb","uptime":{"ms":33020}},"memstats":{"gc\_next":4194304,"memory\_alloc":2984240,"memory\_total":4599752,"rss":29081600}},"libbeat":{"config":{"module":{"running":0}},"output":{"type":"elasticsearch"},"pipeline":{"clients":1,"events":{"active":0}}},"system":{"cpu":{"cores":4},"load":{"1":0,"15":0,"5":0,"norm":{"1":0,"15":0,"5":0}}}}}}

On indices I can see

 ![funbeat](https://us1.discourse-cdn.com/elastic/original/3X/2/7/27bcd3af66085a2a96ebe638c38918ecf52f8d11.png)

---

<div class="post-metadata">

**Author:** ![asad\_ali](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/asad_ali/32/47894_2.png) [@asad\_ali](https://discuss.elastic.co/u/asad_ali)\
**Post date:** [August 21, 2019, 3:32pm UTC](https://discuss.elastic.co/t/ghost-index-unable-to-populate-itself-under-docs-functionbeat/195873/2 "2019-08-21T15:32:54Z")

</div>

Any help?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 11, 2019, 5:32am UTC](https://discuss.elastic.co/t/ghost-index-unable-to-populate-itself-under-docs-functionbeat/195873/3 "2019-09-11T05:32:58Z")

</div>

This topic was automatically closed 20 days after the last reply. New replies are no longer allowed.