# Help needed: CentOS ES-Logstash-Kibana running, but 0 docs, 0 indices **URL:** \ **Category:** Elasticsearch\ **Created:** [June 14, 2014, 8:34am UTC](https://discuss.elastic.co/t/help-needed-centos-es-logstash-kibana-running-but-0-docs-0-indices/18109 "2014-06-14T08:34:42Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![ElasticSearch\_Users\_](https://avatars.discourse-cdn.com/v4/letter/e/b4bc9f/32.png) [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\ **Post date:** [June 14, 2014, 8:34am UTC](https://discuss.elastic.co/t/help-needed-centos-es-logstash-kibana-running-but-0-docs-0-indices/18109/1 "2014-06-14T08:34:42Z")
Als POC I've setup a single machine with Logstash, Elasticsearch and Kibana, But I am stuck: It is running, but no docs are getting in ES and Kibana stays only a dark page. Can someone help me how to get the logs into ES en searchable in Kibana? This is my machine. Just install a CentOS 6.5 (virtual) server, su to root and copy-paste this to the command line and all will be installed: Pastebin: Install\_ES\_Logstash\_Kibana\_for\_CentOS6.5 [http://pastebin.com/fpz5AQzd](http://pastebin.com/fpz5AQzd) ( [http://pastebin.com/fpz5AQzd](http://pastebin.com/fpz5AQzd) ) Wat is missing? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 15, 2014, 12:10am UTC](https://discuss.elastic.co/t/help-needed-centos-es-logstash-kibana-running-but-0-docs-0-indices/18109/2 "2014-06-15T00:10:36Z")
Try swapping the host in your LS output to the actual IP of VM. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: [markw@campaignmonitor.com](mailto:markw@campaignmonitor.com) web: [www.campaignmonitor.com](http://www.campaignmonitor.com) On 14 June 2014 18:34, 'Robert AMS' via elasticsearch \< [elasticsearch@googlegroups.com](mailto:elasticsearch@googlegroups.com)\> wrote: > Als POC I've setup a single machine with Logstash, Elasticsearch and > Kibana, But I am stuck: It is running, but no docs are getting in ES and > Kibana stays only a dark page. Can someone help me how to get the logs into > ES en searchable in Kibana? > > This is my machine. Just install a CentOS 6.5 (virtual) server, su to root > and copy-paste this to the command line and all will be installed: > > Pastebin: Install\_ES\_Logstash\_Kibana\_for\_CentOS6.5 > [http://pastebin.com/fpz5AQzd](http://pastebin.com/fpz5AQzd) ( [Install Elasticsearch, Logstash and Kibana on CentOS 6.5 - Pastebin.com](http://pastebin.com/fpz5AQzd) ) > > Wat is missing? > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd%40googlegroups.com) > [https://groups.google.com/d/msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd%40googlegroups.com?utm_medium=email&utm_source=footer) > . > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEM624Y5W8Rq1xNaxxY3aiLMpA-mRKAnv99L1%2BSi1MhVOb%2B44w%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEM624Y5W8Rq1xNaxxY3aiLMpA-mRKAnv99L1%2BSi1MhVOb%2B44w%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![ElasticSearch\_Users\_](https://avatars.discourse-cdn.com/v4/letter/e/b4bc9f/32.png) [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\ **Post date:** [June 16, 2014, 7:39am UTC](https://discuss.elastic.co/t/help-needed-centos-es-logstash-kibana-running-but-0-docs-0-indices/18109/3 "2014-06-16T07:39:15Z")
[https://lh6.googleusercontent.com/-j\_gDT6SD48w/U56fHAADhdI/AAAAAAAAAAM/rtPA1ltLUvw/s1600/paramedic\_screenshot.png](https://lh6.googleusercontent.com/-j_gDT6SD48w/U56fHAADhdI/AAAAAAAAAAM/rtPA1ltLUvw/s1600/paramedic_screenshot.png) This did not help. Ik paramedic it looks as if everything is running, except there are no docs (and indices) coming in ES. Seen screenshot. Op zondag 15 juni 2014 02:11:09 UTC+2 schreef Mark Walkom: > Try swapping the host in your LS output to the actual IP of VM. > > Regards, > Mark Walkom > > Infrastructure Engineer > Campaign Monitor > email: [ma...@campaignmonitor.com](mailto:ma...@campaignmonitor.com) \ > web: [www.campaignmonitor.com](http://www.campaignmonitor.com) > > On 14 June 2014 18:34, 'Robert AMS' via elasticsearch \< > [elasti...@googlegroups.com](mailto:elasti...@googlegroups.com) \\> wrote: > > > Als POC I've setup a single machine with Logstash, Elasticsearch and > > Kibana, But I am stuck: It is running, but no docs are getting in ES and > > Kibana stays only a dark page. Can someone help me how to get the logs into > > ES en searchable in Kibana? > > > > This is my machine. Just install a CentOS 6.5 (virtual) server, su to > > root and copy-paste this to the command line and all will be installed: > > > > Pastebin: Install\_ES\_Logstash\_Kibana\_for\_CentOS6.5 > > [http://pastebin.com/fpz5AQzd](http://pastebin.com/fpz5AQzd) ( [Install Elasticsearch, Logstash and Kibana on CentOS 6.5 - Pastebin.com](http://pastebin.com/fpz5AQzd) ) > > > > Wat is missing? > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/46611243-97d3-4601-9045-1e27af9804be%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/46611243-97d3-4601-9045-1e27af9804be%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 16, 2014, 10:26am UTC](https://discuss.elastic.co/t/help-needed-centos-es-logstash-kibana-running-but-0-docs-0-indices/18109/4 "2014-06-16T10:26:39Z")
You might want to take this over to the Logstash mailing list instead as that appears to be the problem. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: [markw@campaignmonitor.com](mailto:markw@campaignmonitor.com) web: [www.campaignmonitor.com](http://www.campaignmonitor.com) On 16 June 2014 17:39, 'Robert AMS' via elasticsearch \< [elasticsearch@googlegroups.com](mailto:elasticsearch@googlegroups.com)\> wrote: > [https://lh6.googleusercontent.com/-j\_gDT6SD48w/U56fHAADhdI/AAAAAAAAAAM/rtPA1ltLUvw/s1600/paramedic\_screenshot.png](https://lh6.googleusercontent.com/-j_gDT6SD48w/U56fHAADhdI/AAAAAAAAAAM/rtPA1ltLUvw/s1600/paramedic_screenshot.png) > This did not help. Ik paramedic it looks as if everything is running, > except there are no docs (and indices) coming in ES. Seen screenshot. > > Op zondag 15 juni 2014 02:11:09 UTC+2 schreef Mark Walkom: > > > Try swapping the host in your LS output to the actual IP of VM. > > > > Regards, > > Mark Walkom > > > > Infrastructure Engineer > > Campaign Monitor > > email: [ma...@campaignmonitor.com](mailto:ma...@campaignmonitor.com) > > web: [www.campaignmonitor.com](http://www.campaignmonitor.com) > > > > On 14 June 2014 18:34, 'Robert AMS' via elasticsearch \< > > [elasti...@googlegroups.com](mailto:elasti...@googlegroups.com)\> wrote: > > > > > Als POC I've setup a single machine with Logstash, Elasticsearch and > > > Kibana, But I am stuck: It is running, but no docs are getting in ES and > > > Kibana stays only a dark page. Can someone help me how to get the logs into > > > ES en searchable in Kibana? > > > > > > This is my machine. Just install a CentOS 6.5 (virtual) server, su to > > > root and copy-paste this to the command line and all will be installed: > > > > > > Pastebin: Install\_ES\_Logstash\_Kibana\_for\_CentOS6.5 > > > [http://pastebin.com/fpz5AQzd](http://pastebin.com/fpz5AQzd) ( [Install Elasticsearch, Logstash and Kibana on CentOS 6.5 - Pastebin.com](http://pastebin.com/fpz5AQzd) ) > > > > > > Wat is missing? > > > > > > -- > > > You received this message because you are subscribed to the Google > > > Groups "elasticsearch" group. > > > To unsubscribe from this group and stop receiving emails from it, send > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd% > > > [40googlegroups.com](http://40googlegroups.com) > > > [https://groups.google.com/d/msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd%40googlegroups.com?utm_medium=email&utm_source=footer) > > > . > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/46611243-97d3-4601-9045-1e27af9804be%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/46611243-97d3-4601-9045-1e27af9804be%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/46611243-97d3-4601-9045-1e27af9804be%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/46611243-97d3-4601-9045-1e27af9804be%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEM624bo%3D1CK2nsaidLS0mxEi4Pcmh5R3Q8jFbhaDaUzsw9B-g%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEM624bo%3D1CK2nsaidLS0mxEi4Pcmh5R3Q8jFbhaDaUzsw9B-g%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![ElasticSearch\_Users\_](https://avatars.discourse-cdn.com/v4/letter/e/b4bc9f/32.png) [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\ **Post date:** [June 16, 2014, 11:34am UTC](https://discuss.elastic.co/t/help-needed-centos-es-logstash-kibana-running-but-0-docs-0-indices/18109/5 "2014-06-16T11:34:09Z")
Tnx. Maybe there is an connection to my other problem: No index created: IndexCreationException: failed to create index [https://groups.google.com/forum/#!topic/elasticsearch/lxel5ngD8DE](https://groups.google.com/forum/#!topic/elasticsearch/lxel5ngD8DE) (For that post I might better go to the Logstash mailinglist too, but I think it might be an ES config problem.) Op maandag 16 juni 2014 12:27:08 UTC+2 schreef Mark Walkom: > You might want to take this over to the Logstash mailing list instead as > that appears to be the problem. > > Regards, > Mark Walkom > > Infrastructure Engineer > Campaign Monitor > email: [ma...@campaignmonitor.com](mailto:ma...@campaignmonitor.com) \ > web: [www.campaignmonitor.com](http://www.campaignmonitor.com) > > On 16 June 2014 17:39, 'Robert AMS' via elasticsearch \< > [elasti...@googlegroups.com](mailto:elasti...@googlegroups.com) \\> wrote: > > > [https://lh6.googleusercontent.com/-j\_gDT6SD48w/U56fHAADhdI/AAAAAAAAAAM/rtPA1ltLUvw/s1600/paramedic\_screenshot.png](https://lh6.googleusercontent.com/-j_gDT6SD48w/U56fHAADhdI/AAAAAAAAAAM/rtPA1ltLUvw/s1600/paramedic_screenshot.png) > > This did not help. Ik paramedic it looks as if everything is running, > > except there are no docs (and indices) coming in ES. Seen screenshot. > > > > Op zondag 15 juni 2014 02:11:09 UTC+2 schreef Mark Walkom: > > > > > Try swapping the host in your LS output to the actual IP of VM. > > > > > > Regards, > > > Mark Walkom > > > > > > Infrastructure Engineer > > > Campaign Monitor > > > email: [ma...@campaignmonitor.com](mailto:ma...@campaignmonitor.com) > > > web: [www.campaignmonitor.com](http://www.campaignmonitor.com) > > > > > > On 14 June 2014 18:34, 'Robert AMS' via elasticsearch \< > > > [elasti...@googlegroups.com](mailto:elasti...@googlegroups.com)\> wrote: > > > > > > > Als POC I've setup a single machine with Logstash, Elasticsearch and > > > > Kibana, But I am stuck: It is running, but no docs are getting in ES and > > > > Kibana stays only a dark page. Can someone help me how to get the logs into > > > > ES en searchable in Kibana? > > > > > > > > This is my machine. Just install a CentOS 6.5 (virtual) server, su to > > > > root and copy-paste this to the command line and all will be installed: > > > > > > > > Pastebin: Install\_ES\_Logstash\_Kibana\_for\_CentOS6.5 > > > > [http://pastebin.com/fpz5AQzd](http://pastebin.com/fpz5AQzd) ( [Install Elasticsearch, Logstash and Kibana on CentOS 6.5 - Pastebin.com](http://pastebin.com/fpz5AQzd) ) > > > > > > > > Wat is missing? > > > > > > > > -- > > > > You received this message because you are subscribed to the Google > > > > Groups "elasticsearch" group. > > > > To unsubscribe from this group and stop receiving emails from it, send > > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > > msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd% > > > > [40googlegroups.com](http://40googlegroups.com) > > > > [https://groups.google.com/d/msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/ee7d3476-5551-40d2-aef5-28276e7783bd%40googlegroups.com?utm_medium=email&utm_source=footer) > > > > . > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > -- > > > You received this message because you are subscribed to the Google Groups > > > "elasticsearch" group. > > > To unsubscribe from this group and stop receiving emails from it, send an > > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > > > To view this discussion on the web visit > > > [https://groups.google.com/d/msgid/elasticsearch/46611243-97d3-4601-9045-1e27af9804be%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/46611243-97d3-4601-9045-1e27af9804be%40googlegroups.com) > > > [https://groups.google.com/d/msgid/elasticsearch/46611243-97d3-4601-9045-1e27af9804be%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/46611243-97d3-4601-9045-1e27af9804be%40googlegroups.com?utm_medium=email&utm_source=footer) > > > . > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/e39be043-7d23-48d2-8edb-873352422ff1%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/e39be043-7d23-48d2-8edb-873352422ff1%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![ElasticSearch\_Users\_](https://avatars.discourse-cdn.com/v4/letter/e/b4bc9f/32.png) [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\ **Post date:** [June 16, 2014, 12:52pm UTC](https://discuss.elastic.co/t/help-needed-centos-es-logstash-kibana-running-but-0-docs-0-indices/18109/6 "2014-06-16T12:52:44Z")
After renaming my cluster from 'Elasticsearch-demo' to the default 'elasticsearch' the connection between ES and Logstash automatically was fixed after a restart of ES. Next question: Where do I have to change the name of the cluster, other than /etc/elasticsearch/elasticsearch.yml ? Op zaterdag 14 juni 2014 10:34:42 UTC+2 schreef Robert AMS: > Als POC I've setup a single machine with Logstash, Elasticsearch and > Kibana, But I am stuck: It is running, but no docs are getting in ES and > Kibana stays only a dark page. Can someone help me how to get the logs into > ES en searchable in Kibana? > > This is my machine. Just install a CentOS 6.5 (virtual) server, su to root > and copy-paste this to the command line and all will be installed: > > Pastebin: Install\_ES\_Logstash\_Kibana\_for\_CentOS6.5 > [http://pastebin.com/fpz5AQzd](http://pastebin.com/fpz5AQzd) ( [Install Elasticsearch, Logstash and Kibana on CentOS 6.5 - Pastebin.com](http://pastebin.com/fpz5AQzd) ) > > Wat is missing? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/199085c2-3a61-4455-b738-65e00fcb669c%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/199085c2-3a61-4455-b738-65e00fcb669c%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:22am UTC](https://discuss.elastic.co/t/help-needed-centos-es-logstash-kibana-running-but-0-docs-0-indices/18109/7 "2017-07-06T01:22:07Z")