# How to create multiple filebeats dashboard in Kibana

**URL:** <https://discuss.elastic.co/t/how-to-create-multiple-filebeats-dashboard-in-kibana/311225>\
**Category:** Kibana\
**Created:** [August 2, 2022, 1:33pm UTC](https://discuss.elastic.co/t/how-to-create-multiple-filebeats-dashboard-in-kibana/311225 "2022-08-02T13:33:53Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![huzaifa224](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/huzaifa224/32/105868_2.png) [@huzaifa224](https://discuss.elastic.co/u/huzaifa224)\
**Post date:** [August 2, 2022, 1:33pm UTC](https://discuss.elastic.co/t/how-to-create-multiple-filebeats-dashboard-in-kibana/311225/1 "2022-08-02T13:33:53Z")

</div>

Hi,  
I have multiple Filebeats are running in multiple systems with custom index name. Filebeat send data to Logstash then logstash send data to Elasticsearch. Every thing is working fine logs are showing in Discovery tab. But the issue is when i trying to load dashboard in kibana by using 'Filebeat setup -e' the dashboards are not getting load in it it and showing the error(Image is attached)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/a/7ad662140a4d8aa5033e2ee47ffcdddefc693266.png)

Filebeat.yml

> filebeat.inputs:
> 
> - type: log  
> enabled: true  
> paths:
> - /var/log/_.log  
> filebeat.config.modules:  
> path: ${path.config}/modules.d/_.yml  
> reload.enabled: false  
> setup.template.settings:  
> index.number\_of\_shards: 1  
> setup.dashboards.enabled: true  
> setup.dashboards.index: "care-stagging-_"  
> setup.kibana:  
> host: "[http://xx.xx.xx.xx:5601](http://xx.xx.xx.xx:5601)"  
> username: "elastic"  
> password: "VKkLOmFXUupzgXNnahp"  
> ssl.verification\_mode: none  
> output.logstash:  
> hosts: ["xx.xx.xx.xx:5044"]  
> index: "care-stagging"  
> setup.template.name: "care-stagging"  
> setup.template.pattern: "care-stagging-_"  
> setup.ilm.enabled: false  
> setup.template.enabled: true  
> setup.template.overwrite: false  
> processors:
> - add\_fields:  
> fields:  
> host.ip: "xx.xx.xx.xx"  
> logging.metrics.period: 30s

Please share how can i load multiples filebeat dashboards in kibana.

---

<div class="post-metadata">

**Author:** ![rugenl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rugenl/32/12887_2.png) [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Post date:** [August 2, 2022, 4:06pm UTC](https://discuss.elastic.co/t/how-to-create-multiple-filebeats-dashboard-in-kibana/311225/2 "2022-08-02T16:06:47Z")

</div>

In filebeat.yml, use a different "space" for each one.

# Optional Kibana space ID.

#space.id: "

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [August 3, 2022, 12:30am UTC](https://discuss.elastic.co/t/how-to-create-multiple-filebeats-dashboard-in-kibana/311225/3 "2022-08-03T00:30:21Z")

</div>

I think you issue is You are setting a custom index name

`index: "care-stagging"`

The preloaded filebeat dashboards work on a specific index pattern..

`filebeat-*`

As the error indicates in your screenshot, You will need to build your own filebeat dashboards.

In addition, you are trying to use the Apache logs dashboard without using the module That will not work either as there is specific parsing that takes place and data types so I'm not really clear what you're trying to accomplish.

Are your logs Apache logs?

And since you didn't format your filebeat.yml it's very hard to tell what it's actually configured

---

<div class="post-metadata">

**Author:** ![huzaifa224](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/huzaifa224/32/105868_2.png) [@huzaifa224](https://discuss.elastic.co/u/huzaifa224)\
**Post date:** [August 3, 2022, 6:46am UTC](https://discuss.elastic.co/t/how-to-create-multiple-filebeats-dashboard-in-kibana/311225/4 "2022-08-03T06:46:24Z")

</div>

If i use same index with name filebeat-\* for all Filbeats that are running in different servers, isn't it will conflict when that data were show in Kibana Discovery?

I am trying to create sperate kibana dashboards for each Filebeat. For ex: I have two servers A, B on both machines Filebeat is configured with custom index and sending data to logstash and then logstash send data to Elasticsearch, Now i want, kibana show two sperate dashboards for each server and i can switch between them.

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [August 3, 2022, 1:43pm UTC](https://discuss.elastic.co/t/how-to-create-multiple-filebeats-dashboard-in-kibana/311225/5 "2022-08-03T13:43:46Z")

</div>

If server A and B send the same type of data you could send the data to the filebeat-\* index and then simply create 1 dashboard and put a [filter control at the top](https://www.elastic.co/guide/en/kibana/current/add-controls.html) that allows your user to simple select which server they want to look at.

IF this data is apache data, you could use the apache module and just add that control to the top of the default dashboards and have a great user experience.

IF server A and B send to completely different set of data to two completely indices then you need to create your own 2 separate dashboards using 2 separate index patterns

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 31, 2022, 1:43pm UTC](https://discuss.elastic.co/t/how-to-create-multiple-filebeats-dashboard-in-kibana/311225/6 "2022-08-31T13:43:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
