My Kibana dashboard shows " No Results found" for my system module of metricbeat

Elastic Stack Beats
, ,
1

The kibana dashboard for system shows "No Result found" for all the fields that i have configured.

Here is my system module config :

# Module: system
# Docs: https://www.elastic.co/guide/en/beats/metricbeat/7.x/metricbeat-module-system.html

- module: system
  period: 10s
  metricsets:
    - cpu
    - load
    - memory
    - network
    - process
    - process_summary
    - socket_summary
    #- entropy
    - core
    #- diskio
    #- socket
    - service
    - users
  process.include_top_n:
    by_cpu: 5      # include top 5 processes by CPU
    by_memory: 5   # include top 5 processes by memory
  # Configure the mount point of the host’s filesystem for use in monitoring a host from within a container
  #system.hostfs: "/hostfs"

- module: system
  period: 1m
  metricsets:
    - filesystem
    - fsstat
  processors:
  - drop_event.when.regexp:
      system.filesystem.mount_point: '^/(sys|cgroup|proc|dev|etc|host|lib|snap)($|/)'

- module: system
  period: 15m
  metricsets:
    - uptime

#- module: system
#  period: 5m
#  metricsets:
#    - raid
#  raid.mount_point: '/'

And here is the dashboard error

metricbeat error
metricbeat error1884×654 23.8 KB

The dashboard loads the correct fields for the Docker module only.
any other module like nginx, system, kibana, elasticsearch show no result.

Any help is appreciated Thank you.

2

hi @Shubh_Garg , config looks good, can you check the metricbeat.log file and see if there is any information there?

3

Hey @MarianaD , Thank you for the quick response. Here are the metricbeat logs.

2021-08-23T04:59:55.705Z        INFO    instance/beat.go:660    Home path: [/usr/share/metricbeat] Config path: [/etc/metricbeat] Data path: [/var/lib/metricbeat] Logs path: [/var/log/metricbeat]
2021-08-23T04:59:55.714Z        INFO    instance/beat.go:668    Beat ID: 1d813f4b-f8a6-4ea8-8cbb-368316d8f29a
2021-08-23T04:59:55.726Z        INFO    [add_cloud_metadata]    add_cloud_metadata/add_cloud_metadata.go:105    add_cloud_metadata: hosting provider type detected as aws, metadata={"account":{"id":"453837718270"},"availability_zone":"ap-south-1a","image":{"id":"ami-026f33d38b6410e30"},"instance":{"id":"i-07eac7401986dc733"},"machine":{"type":"t3a.large"},"provider":"aws","region":"ap-south-1"}

The above is from /var/log/metricbeat/metricbeat

2021-08-18T11:13:39.154Z        INFO    instance/beat.go:665    Home path: [/usr/share/metricbeat] Config path: [/etc/metricbeat] Data path: [/var/lib/metricbeat] Logs path: [/var/log/metricbeat]
2021-08-18T11:13:39.155Z        INFO    instance/beat.go:673    Beat ID: 1d813f4b-f8a6-4ea8-8cbb-368316d8f29a
2021-08-18T11:13:39.161Z        INFO    [add_cloud_metadata]    add_cloud_metadata/add_cloud_metadata.go:105    add_cloud_metadata: hosting provider type detected as aws, metadata={"cloud":{"account":{"id":"453837718270"},"availability_zone":"ap-south-1a","image":{"id":"ami-026f33d38b6410e30"},"instance":{"id":"i-07eac7401986dc733"},"machine":{"type":"t3a.large"},"provider":"aws","region":"ap-south-1","service":{"name":"EC2"}}}
2021-08-18T11:13:39.182Z        INFO    [beat]  instance/beat.go:1014   Beat info       {"system_info": {"beat": {"path": {"config": "/etc/metricbeat", "data": "/var/lib/metricbeat", "home": "/usr/share/metricbeat", "logs": "/var/log/metricbeat"}, "type": "metricbeat", "uuid": "1d813f4b-f8a6-4ea8-8cbb-368316d8f29a"}}}
2021-08-18T11:13:39.182Z        INFO    [beat]  instance/beat.go:1023   Build info      {"system_info": {"build": {"commit": "e127fc31fc6c00fdf8649808f9421d8f8c28b5db", "libbeat": "7.14.0", "time": "2021-07-29T21:09:05.000Z", "version": "7.14.0"}}}
2021-08-18T11:13:39.182Z        INFO    [beat]  instance/beat.go:1026   Go runtime info {"system_info": {"go": {"os":"linux","arch":"amd64","max_procs":2,"version":"go1.16.6"}}}
2021-08-18T11:13:39.184Z        INFO    [beat]  instance/beat.go:1030   Host info       {"system_info": {"host": {"architecture":"x86_64","boot_time":"2021-08-18T08:12:42Z","containerized":false,"name":"ip-10-0-1-146.ap-south-1.compute.internal","ip":["127.0.0.1/8","::1/128","10.0.1.146/24","fe80::9f:f7ff:fe30:e0f8/64","172.17.0.1/16","172.18.0.1/16","172.21.0.1/16","fe80::42:36ff:fe19:4b67/64","fe80::24d4:dbff:fe4f:15dc/64","fe80::4c47:52ff:feab:3ec4/64","fe80::60d6:64ff:fe6a:7771/64","fe80::7c4f:bcff:feb3:9b75/64","fe80::ac87:7fff:feca:7089/64","fe80::d8d6:5ff:fe33:8e86/64"],"kernel_version":"3.10.0-1160.36.2.el7.x86_64","mac":["02:9f:f7:30:e0:f8","02:42:29:1f:05:6f","02:42:a5:da:0f:2c","02:42:36:19:4b:67","26:d4:db:4f:15:dc","4e:47:52:ab:3e:c4","62:d6:64:6a:77:71","7e:4f:bc:b3:9b:75","ae:87:7f:ca:70:89","da:d6:05:33:8e:86"],"os":{"type":"linux","family":"redhat","platform":"centos","name":"CentOS Linux","version":"7 (Core)","major":7,"minor":9,"patch":2009,"codename":"Core"},"timezone":"UTC","timezone_offset_sec":0,"id":"3d5c05376530a2eb49e3e90576f83c5b"}}}
2021-08-18T11:13:39.185Z        INFO    [beat]  instance/beat.go:1059   Process info    {"system_info": {"process": {"capabilities": {"inheritable":null,"permitted":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend"],"effective":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend"],"bounding":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend"],"ambient":null}, "cwd": "/etc/metricbeat", "exe": "/usr/share/metricbeat/bin/metricbeat", "name": "metricbeat", "pid": 28272, "ppid": 28270, "seccomp": {"mode":"disabled","no_new_privs":false}, "start_time": "2021-08-18T11:13:38.560Z"}}}
2021-08-18T11:13:39.185Z        INFO    instance/beat.go:309    Setup Beat: metricbeat; Version: 7.14.0
2021-08-18T11:13:39.185Z        INFO    [index-management]      idxmgmt/std.go:184      Set output.elasticsearch.index to 'metricbeat-7.14.0' as ILM is enabled.
2021-08-18T11:13:39.187Z        WARN    [cfgwarn]       tlscommon/config.go:100 DEPRECATED: Treating the CommonName field on X.509 certificates as a host name when no Subject Alternative Names are present is going to be removed. Please update your certificates if needed. Will be removed in version: 8.0.0
2021-08-18T11:13:39.189Z        INFO    [esclientleg]   eslegclient/connection.go:100   elasticsearch url: https://localhost:9200
2021-08-18T11:13:39.190Z        INFO    [publisher]     pipeline/module.go:113  Beat name: ip-10-0-1-146.ap-south-1.compute.internal
2021-08-18T11:13:39.221Z        INFO    kibana/client.go:122    Kibana url: https://localhost:5601
2021-08-18T11:13:39.859Z        INFO    kibana/client.go:122    Kibana url: https://localhost:5601
2021-08-18T11:15:23.764Z        INFO    instance/beat.go:848    Kibana dashboards successfully loaded.

The above is from /var/log/metricbeat/metricbeat.5

If you find anything incorrect please do tell.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.