Kubernetes logs to filebeats

Elastic Stack Kibana
1

I have ELK stack running in CentOS-7 environment, and I try to get logs from my Kubernetes cluster.

for that, I installed filebeats as described. And those pods are running.

I can see Obeservability-> Logs shows kubernetes logs.

But I can not Do Kibana Discover. It shows only metricbeat-* which I installed and then removed as I need to use filebeat.

So how can I add filebeat to run custom queries?

2

Hello @sachithmuhandiram

What indices are you using to store your logs? You likely need to create a new index pattern to make this content available in discover and other kibana apps.

Thanks,
Matt

3

Yes, Thats what I am trying to do, but always, metricsbeat is shown in index page, not filebeat.

4

what does GET /_cat/indices return?

5

No results match your search criteria

6

Could you try running that from the dev tools console? https://www.elastic.co/guide/en/kibana/current/console-kibana.html

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.