Hi,
I tried to follow this guide: https://www.elastic.co/blog/grokking-the-linux-authorization-logs
I cannot enable system using following command:
filebeat -e -setup -modules=system
I cannot install dashboards using command:
/usr/share/filebeat/scripts/import_dashboards -file beats-dashboards-5.6.6.zip -user elastic -pass XXXX
[root@dzllog01t xnlxd36@LU.AD.DOM]# /usr/share/filebeat/scripts/import_dashboards -file beats-dashboards-5.6.6.zip -user elastic -pass XXXX
Initialize the Elasticsearch 5.6.6 loader
Elasticsearch URL http://127.0.0.1:9200
Created temporary directory /tmp/tmp777252786
Unzip archive /tmp/tmp777252786
Importing Kibana from /tmp/tmp777252786/beats-dashboards-5.6.6/filebeat
Importing directory /tmp/tmp777252786/beats-dashboards-5.6.6/filebeat/5.x
Import directory /tmp/tmp777252786/beats-dashboards-5.6.6/filebeat/5.x
Import index-pattern from /tmp/tmp777252786/beats-dashboards-5.6.6/filebeat/5.x/index-pattern/filebeat.json
fail to import the dashboards in Elasticsearch: Error importing URL/file: Failed to import index-pattern: Failed to load directory /tmp/tmp777252786/beats-dashboards-5.6.6/filebeat/5.x/index-pattern:
error loading /tmp/tmp777252786/beats-dashboards-5.6.6/filebeat/5.x/index-pattern/filebeat.json: couldn't load json. Error: 404 Not Found
What's wrong?
Regards