Load the templates manually - is the output correct?

Elastic Stack Beats
1

Hi all,
since my filebeat doesn't have any access to Elasticsearch I have to follow this procedure https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-template.html#load-template-manually.

I have the following output:

curl -XPUT -H 'Content-Type: application/json' http://localhost:9200/_template/filebeat-6.2.1 -d@/tmp/filebeat.template.json -u admin
Enter host password for user 'admin':
curl: (52) Empty reply from server

Is it correct output ? And how do I verify this command did what it was supposed to do ?

2

I've just had a look at elasticsearch logs and it told me that

Someone (/127.0.0.1:35678) speaks http plaintext instead of ssl, will close the channel

so I realized I should have used -k and https. After that I got the answer acknowledged: true.

3

Glad you found the solution yourself and thanks for posting it.

4

But after I run it and then run from the Kibana console:

GET _cat/indices

I don't get any filebeat-* indices.
Why is that ?

5

Can you share your filebeat log file?

6

It's already working. I have removed SG and went for the simplest solution. Also forgot to load the default dashboard (?).

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.