Hi,
I once use the follwing ELK + packetbeat stack before, the packetbeat events showed up in Kibana as expected.
packet:1.0.0-beta2
elasticsearch: 1.4.4
logstash: 1.4.2
redis: 3.0.1
Kibana:4.1.1
Now I upgrade the ELK & packetbeat, The packetbeat doesn't show up in Kibana now.
packetbeat: 1.0.1
elasticsearch: 2.1.0
Kibana: 4.3.0
Here is the print screen , no results found.
I query in the Elasticsearch, the packetbeat indexes are available.
[root@i-a623ee17 ~]# curl '10.10.0.168:9200/_cat/indices?v' | grep packetbeat
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 4845 100 4845 0 0 10248 0 --:--:-- --:--:-- --:--:-- 10243
green open packetbeat-2015.12.30 5 1 157199 0 168.9mb 84.6mb
green open packetbeat-2015.12.31 5 1 151899 0 160.9mb 80.3mb
green open packetbeat-2015.12.24 5 1 160891 0 173.5mb 86.7mb
green open packetbeat-2015.12.25 5 1 151637 0 160.4mb 80.1mb
green open packetbeat-2015.12.22 5 1 120476 0 139.8mb 69.9mb
green open packetbeat-2015.12.23 5 1 154092 0 166.8mb 83.3mb
green open packetbeat-2015.12.28 5 1 151771 0 160.7mb 80.4mb
green open packetbeat-2015.12.29 5 1 152689 0 162.3mb 81.1mb
green open packetbeat-2015.12.26 5 1 151437 0 160.5mb 80.3mb
green open packetbeat-2015.12.27 5 1 151578 0 160.9mb 80.4mb
green open packetbeat-2015.12.21 5 1 92282 0 101.7mb 50.8mb
green open packetbeat-2015.12.20 5 1 90493 0 98.9mb 49.5mb
green open .packetbeat-topology 5 1 2 0 29kb 14.5kb
green open packetbeat-2016.01.01 5 1 152914 0 162.2mb 81.1mb
green open packetbeat-2016.01.02 5 1 152788 0 162mb 81mb
green open packetbeat-2016.01.03 5 1 152660 0 161.3mb 80.7mb
green open packetbeat-2015.12.18 5 1 44453 0 44.3mb 22.1mb
green open packetbeat-2016.01.04 5 1 19793 0 21.8mb 10.9mb
green open packetbeat-2015.12.19 5 1 90342 0 98.6mb 49.3mb
I also load the packetbeat index template using the following command.
curl -XPUT 'http://localhost:9200/_template/packetbeat' -d@/etc/packetbeat/packetbeat.template.json
I am not sure if the kibana 4.3.0 is compatible with packetbeat 1.0.1, or if there are some mistake in my setup.
I will be grateful if you can help me to figure out the root cause. Thank you.