New Index not showingup in kibana 5 Discover Data

Elastic Stack Kibana
1

Hi Team,

I have loaded sample data given in doc for log data . Could able to successfully do it verified in elasticSearch plugins index got created with data loaded . Create index in kibana but unable to access in "Discover Data" Getting "No Results Found" .

indices.JPG1553×186 39.3 KB

image.png1738×775 56.5 KB

I verified with timestamp format change also still no success .
Can any one help in What am doing wrong?

2

check your logs
cat /var/log/logstash/logstash.log
for any errors

3

Am not able to run the command can you give the proper command .

4

on which system hav you installed your elk server

5

Windows 7

6

sorry those command were for ubuntu and centos look for windows logs

7

How to check for windows logs? BDW from screenshots are you getting any clue. It looks alright to me .

8

Are your timestamps correctly set in UTC? What do you get if you perform a match all query against the logstash-2017.06.01 index in Console?

9

Hi Christian,

Thank you for reaching out, i tried below my screenshots .

image.png1730×419 23.8 KB

getting some parse exception What am i doing wrong ?

10

I overlooked that you had older indices matching the pattern as well. The console query should look something like this:

GET /logstash-2017.06.01/_search
{
  "query": {
    "match_all": {}
  }
}
11

Ya christian am able to fetch all data with above command .

image.png1679×794 46.8 KB

12

Look at the timestamp in your document. I wonder how this ended up in the logstash-2017.06.01 index given that the date is in the future?

13

Thanks christian for pointing out but can you conform how future date got set as in my uploaded data json file i checked there is no such date their . And how can i update it .

14

It is present already in the original message, so I would look at the source of the logs.

15

Thanks Christian you save my day . Am new to ES so just playing arround . Please bear with me .:slight_smile:

16

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.