When we click on Nodes under the Logstash section. Nothing is displayed!!
Try setting the time range more than 15 minutes, like last 24 hrs or last 7 days, inside the nodes page
last 1 week. No luck. We are screwed!!!
Did it work before? Did it show logstash nodes data before?
Also, check for metric logs in Discover, I think the index is .monitoring-logstash-* or any other logs from logstash nodes
Also, could be because of old versions or permissions
POST /_query?format=txt
{
"query": """
FROM .monitoring-logstash-*
| LIMIT 100
"""
}
{
"error": {
"root_cause": [
{
"type": "verification_exception",
"reason": """Found 1 problem
line 2:3: Unknown index [.monitoring-logstash-*]"""
}
],
"type": "verification_exception",
"reason": """Found 1 problem
line 2:3: Unknown index [.monitoring-logstash-*]"""
},
"status": 400
}
set xpack.monitoring.enabled: true in the logstash.yml?
Also, did it work before? did the problem occur after any config change?
@arav
The monitoring is already enabled if not we will not see other logs
i dont recall it work before. Is it because we are not using the saas logstash but running via our own pipeline on our own local site? but if its able to locate the number why isnt it displaying. still not make sense to me...

