Kibana not fetching results

hi i have installed elk server on my instance
i am receiving logs from other machine

curl -XGET 'http://localhost:9200/filebeat-*/_search?pretty'

output is

  "_index" : "filebeat-2017.05.26",
  "_type" : "syslog",
  "_id" : "AVxnkZavXMBSzU68KEBV",
  "_score" : 1.0,
  "_source" : {
    "message" : "May 26 17:40:36 Hadoop-client1 sshd[957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=",
    "@version" : "1",
    "@timestamp" : "2017-05-26T12:10:36.000Z",
    "input_type" : "log",
    "fields" : null,
    "beat" : {
      "hostname" : "",
      "name" : ""
    "source" : "/var/log/auth.log.1",

but kibana is not fetching any results

Sorry, what results do you want Kibana to fetch? It doesn't have any CLI features, you just need to look for them in the web interface.

it is not displaying anything

Have you tried increasing the time range from the top right? maybe you have no events in the past 15 minutes.

it worked there was problem in filebeat-template.json file thanks

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.