Indices not showing on index pattern

Hi All, 

Indices not showing on index pattern.
![Screen Shot 2020-03-24 at 3.31.36 PM|690x295](upload://60XZcdDzmbgqOdusMfy0TKUjau.png) 

docker-compose.yml config

###################
version: "3"
services:
  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:7.6.1
    container_name: elasticsearch
    environment:
      - discovery.type=single-node
    ports: 
    - 9200:9200
    - 9300:9300
  kibana:
    image: docker.elastic.co/kibana/kibana:7.6.1
    container_name: kibana
    environment:
        SERVER_NAME: localhost
        ELASTICSEARCH_URL: http://elasticsearch:9200/
    ports:
    - 5601:5601
  logstash:
    image: docker.elastic.co/logstash/logstash:7.6.1
    container_name: logstash
    volumes:
    -{Mypath}:/usr/share/logstash/pipeline/
    ports:
    - 9600:9600    
    depends_on:
    - elasticsearch
###################

logstash.conf
###################
input {
  file {
    type => "syslog"
    path => "{MY_var_path}/logs.log"
  }
}

output {
  stdout {
    codec => rubydebug
  }
  elasticsearch {
    hosts => ["elasticsearch:9200"]
    index => "logstash-%{+YYYY-MM-dd}"
  }
}
`###################`
ELK is up and running. 

http://localhost:9200/_cat/indices
![Screen Shot 2020-03-24 at 3.40.08 PM|690x98](upload://aiLlEjrOtCVV7B82oKH47Tl06xa.png) 

Please help.

Thank you

Hi and welcome to our community

seems this post is missing screenshots, or the screenshots are formatted as code, could you change that, so it would be easier to debug

many thx!
Matthias

1 Like

Hi @matw
Here are the screenshot.

Indices not showing on index pattern.

http://localhost:9200/_cat/indices

Hi

It should show non-system-indices that are available, but it seems you don't have any date in you cluster? Then there are also no indices available to select. Once you've got indices containing data you can create an index pattern

1 Like

Hi @matw,

Thanks for that, i'm not sure about the date in cluster can you please provide me some example? Thanks in advance

Sorry, was a typo, I meant : data in your cluster

Hi @matw

My thinking was my logstash.conf will pull the data("MY_var_path}/logs.log") and transfer to kibana.

logstash.conf file

input {
  file {
    type => "syslog"
    path => "{MY_var_path}/logs.log"
  }
}

output {
  stdout {
    codec => rubydebug
  }
  elasticsearch {
    hosts => ["elasticsearch:9200"]
    index => "logstash-%{+YYYY-MM-dd}"
  }
}

```

this is a valid approach, but according to you screenshot, local:9200/_cat/indices contains no data, just system indices. so you first have to check why no data is ingested into Elasticsearch

Best,
Matthias

Thanks @matw,

I will look on the logstash.conf file

Regards,

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.