Well, there are Saved searches and Dashboards that are setup to use indices that are named filebeat-* (filebeat setup -e). That does not mean those indices are created.
As I mentioned before, Filebeat will create those indices (if they don't exist) when it ships the first log message to Elasticsearch. If there are no log messages to ship, those indices will not be created.
I want to thank you all for your help.
A colleague was just checking the kibana dashboards and found out it was working and came to tell me.
Apparently all I needed to do was restart the service after fixing the config.
I was only re-running "filebeat setup -e" before.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.