# No logs in Kibana logs app

**URL:** <https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005>\
**Category:** Kibana\
**Created:** [February 26, 2020, 10:13am UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005 "2020-02-26T10:13:29Z")\
**Posts on this page:** 16\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vaishali\_Gupta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vaishali_gupta/32/63324_2.png) [@Vaishali\_Gupta](https://discuss.elastic.co/u/Vaishali_Gupta)\
**Post date:** [February 26, 2020, 10:13am UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/1 "2020-02-26T10:13:29Z")

</div>

I have configured the EFK stack and logs are visible in kibana under the discover button when i create index pattern fluentd\*.  
But same logs are not visible in logs app when I make custom settings.

PFA the configuration done via UI for logs app source -

 ![Screenshot 2020-02-26 at 3.39.09 PM](https://us1.discourse-cdn.com/elastic/original/3X/1/4/14ec8851c59542acf9b524b2ce0c607fe1f7b3df.png)

And the sample log available under Discover button -

 ![Screenshot 2020-02-26 at 3.39.38 PM](https://us1.discourse-cdn.com/elastic/original/3X/a/f/af7feb76e08d19d39e4045e8311643e42d7870c2.png)

Not sure whats going wrong here.

Also, checking Kibana logs, it shows this -

```
{"type":"error","@timestamp":"2020-02-26T10:39:02Z","tags":["connection","client","error"],"pid":1,"level":"error","error":{"message":"139989745084288:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1407:SSL alert number 46\n","name":"Error","stack":"Error: 139989745084288:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1407:SSL alert number 46\n"},"message":"139989745084288:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1407:SSL alert number 46\n"}

```

And API response being  
{  
"data": null,  
"errors": [{  
"message": "[illegal\_argument\_exception] Fielddata is not supported on field [\_version] of type [\_version]",  
"locations": [{  
"line": 4,  
"column": 5  
}],  
"path": ["source", "logEntriesAround"]  
}]  
}

---

<div class="post-metadata">

**Author:** ![mattkime](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mattkime/32/43522_2.png) [@mattkime](https://discuss.elastic.co/u/mattkime)\
**Post date:** [February 26, 2020, 7:23pm UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/2 "2020-02-26T19:23:26Z")

</div>

Hello @Vaishali_Gupta

The Kibana log you posted potentially indicates a connection issue.

Can you post a `har` file of the failed request? That way I can see full information from the browser perspective regarding the failure.

It might be helpful to have the Kibana log lines proceeding the failure you've posted.

---

<div class="post-metadata">

**Author:** ![Vaishali\_Gupta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vaishali_gupta/32/63324_2.png) [@Vaishali\_Gupta](https://discuss.elastic.co/u/Vaishali_Gupta)\
**Post date:** [March 2, 2020, 1:31pm UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/3 "2020-03-02T13:31:17Z")

</div>

Hi @mattkime, I could get logs in Kibana app. But still would like to understand one thing. Can we configure multiple sources in xpack section of logs app i.e. something like -

```
apiVersion: kibana.k8s.elastic.co/v1
kind: Kibana
metadata:
  name: {{ template "platform.fullname" . }}
spec:
  version: {{ .Values.kibana.version }}
  count: {{ .Values.kibana.nodeCount }}
  podTemplate:
    metadata:
      annotations:
        {{- toYaml .Values.kibana.podAnnotations | nindent 8 }}
    tolerations:
      {{- toYaml .Values.kibana.tolerations | nindent 6 }}
  elasticsearchRef:
    name: {{ template "platform.fullname" . }}
  http:
    service:
      spec:
        type: LoadBalancer
  config:
    xpack:
      infra:
        sources:
          default:
            logAlias: fluent-bit-default*
            fields:
              timestamp: time
              tiebreaker: _score
              container: kubernetes.docker_id
              host: kubernetes.host
              pod: kubernetes.pod_id
          sourceA:
            logAlias: fluent-bit-sourceA*
            fields:
              timestamp: time
              tiebreaker: _score
              container: kubernetes.docker_id
              host: kubernetes.host
              pod: kubernetes.pod_id
          sourceB:
            logAlias: fluent-bit-sourceB*
            fields:
              timestamp: time
              tiebreaker: _score
              container: kubernetes.docker_id
              host: kubernetes.host
              pod: kubernetes.pod_id

```

If not, is there any way to configure multiple sources in logs app just like multiple index-patterns in discover option of Kibana?

---

<div class="post-metadata">

**Author:** ![mattkime](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mattkime/32/43522_2.png) [@mattkime](https://discuss.elastic.co/u/mattkime)\
**Post date:** [March 8, 2020, 3:04am UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/4 "2020-03-08T03:04:21Z")

</div>

What is your goal in configuring multiple sources? I think you can only define the default, but you can define multiple log aliases in comma delimited format - `fluent-bit-default*,fluent-bit-sourceA*,fluent-bit-sourceB*`

---

<div class="post-metadata">

**Author:** ![Vaishali\_Gupta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vaishali_gupta/32/63324_2.png) [@Vaishali\_Gupta](https://discuss.elastic.co/u/Vaishali_Gupta)\
**Post date:** [March 8, 2020, 3:38am UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/5 "2020-03-08T03:38:12Z")

</div>

I have different indices in elastic search for each user i.e. fluent-bit-sourceA for userA and fluent-bit-sourceB index for userB. I want to configure different sources in logs app for different users so that users are not filtering on their end based on index pattern. If in "Discover" app, we can define multiple index patterns, "Logs" app should also be somehow configurable with multiple sources I believe.

---

<div class="post-metadata">

**Author:** ![mattkime](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mattkime/32/43522_2.png) [@mattkime](https://discuss.elastic.co/u/mattkime)\
**Post date:** [March 9, 2020, 8:16pm UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/6 "2020-03-09T20:16:17Z")

</div>

I'm not sure if this will meet your needs but you can set Metrics settings on a per space basis and then have different users use different spaces.

---

<div class="post-metadata">

**Author:** ![Vaishali\_Gupta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vaishali_gupta/32/63324_2.png) [@Vaishali\_Gupta](https://discuss.elastic.co/u/Vaishali_Gupta)\
**Post date:** [March 16, 2020, 10:49am UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/7 "2020-03-16T10:49:28Z")

</div>

Can this be setup while bringing up kibana? I mean how do i configure multiple spaces in kibana.yml. Can you share details around that?

---

<div class="post-metadata">

**Author:** ![mattkime](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mattkime/32/43522_2.png) [@mattkime](https://discuss.elastic.co/u/mattkime)\
**Post date:** [March 25, 2020, 10:05pm UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/8 "2020-03-25T22:05:35Z")

</div>

Apologies for the slow response.

Here are the docs on setting up spaces - [https://www.elastic.co/guide/en/kibana/master/xpack-spaces.html](https://www.elastic.co/guide/en/kibana/master/xpack-spaces.html)

You would configure the Metrics app from within each space, in Kibana, not via kibana.yml.

---

<div class="post-metadata">

**Author:** ![Vaishali\_Gupta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vaishali_gupta/32/63324_2.png) [@Vaishali\_Gupta](https://discuss.elastic.co/u/Vaishali_Gupta)\
**Post date:** [March 26, 2020, 4:34am UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/9 "2020-03-26T04:34:06Z")

</div>

Are there some public apis or client libraries exposed to create these spaces and configure logs app and other things in a spaces?

---

<div class="post-metadata">

**Author:** ![Vaishali\_Gupta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vaishali_gupta/32/63324_2.png) [@Vaishali\_Gupta](https://discuss.elastic.co/u/Vaishali_Gupta)\
**Post date:** [March 29, 2020, 10:48am UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/10 "2020-03-29T10:48:49Z")

</div>

@mattkime Also if there is some go-client to configure spaces in kibana and configure logs app that you could point me to, that would be great.

I can see this - [https://github.com/elastic/go-elasticsearch](https://github.com/elastic/go-elasticsearch). Could not find any kibana specific library.  
Not sure if it can configure spaces in kibana and logs app.

---

<div class="post-metadata">

**Author:** ![mattkime](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mattkime/32/43522_2.png) [@mattkime](https://discuss.elastic.co/u/mattkime)\
**Post date:** [April 3, 2020, 3:41pm UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/11 "2020-04-03T15:41:26Z")

</div>

Spaces configuration is typically done through the graphical user interface. If you need to create a large number of them - and I'd be curious to how many spaces you'd need to configure - it may be possible to automate it via a custom kibana plugin.

---

<div class="post-metadata">

**Author:** ![Vaishali\_Gupta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vaishali_gupta/32/63324_2.png) [@Vaishali\_Gupta](https://discuss.elastic.co/u/Vaishali_Gupta)\
**Post date:** [April 3, 2020, 4:19pm UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/12 "2020-04-03T16:19:21Z")

</div>

Hi, we need to onboard different clients to our platform and make sure no client can see logs of other client. As far as the number of spaces are concerned, lets take a ballpark number as 1000. I am doing it using Kibana APIs. But given the APIs are experimental, little doubtful about using those. Also, how many spaces can kibana handle in general?

---

<div class="post-metadata">

**Author:** ![mattkime](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mattkime/32/43522_2.png) [@mattkime](https://discuss.elastic.co/u/mattkime)\
**Post date:** [April 3, 2020, 4:24pm UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/13 "2020-04-03T16:24:58Z")

</div>

there's a configurable limit to the number of spaces - [https://www.elastic.co/guide/en/kibana/current/spaces-settings-kb.html](https://www.elastic.co/guide/en/kibana/current/spaces-settings-kb.html)

---

<div class="post-metadata">

**Author:** ![Vaishali\_Gupta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vaishali_gupta/32/63324_2.png) [@Vaishali\_Gupta](https://discuss.elastic.co/u/Vaishali_Gupta)\
**Post date:** [April 3, 2020, 4:53pm UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/14 "2020-04-03T16:53:32Z")

</div>

So do you think that using APIs is a go to solution for this given the apis are experimental?

---

<div class="post-metadata">

**Author:** ![mattkime](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mattkime/32/43522_2.png) [@mattkime](https://discuss.elastic.co/u/mattkime)\
**Post date:** [April 3, 2020, 4:56pm UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/15 "2020-04-03T16:56:58Z")

</div>

Its the only option as far as I can tell.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 1, 2020, 5:09pm UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005/16 "2020-05-01T17:09:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
