No logs in Kibana

[SaraBetty (Sara)]

Hello everyone,

I performed the beats installation (packetbeat/winlogbeat) on the DCs and the logstash installation on the server. I am not getting the logs in Kibana, though i see the packets (connectivity) between the DCs and the Server.
Any suggestion ?

[warkolm (Mark Walkom)]

Welcome to our community!

Are Beats sending to Logstash? What does your Logstash config look like?
What do your Beats and Logstash logs show?

[SaraBetty (Sara)]

Hello,

Thank you for welcoming
Yes, the beats are sent to the Logstash.

=========Logstash conf file====
input {
beats {
port => 5044
}
}

output {
elasticsearch {
hosts => ["http://localhost:9200"]

}
}
==========Logstash logs ======
[Producer clientId=producer-1] Got error produce response with correlation id 17563 on top
[Producer clientId=producer-1] Received invalid metadata error in produce request on parti
[Producer clientId=producer-1] Got error produce response with correlation id 17563 on top
[Producer clientId=producer-1] Received invalid metadata error in produce request on parti

[warkolm (Mark Walkom)]

Do the Beats logs show that things are being shipped to Logstash?

[SaraBetty (Sara)]

yes, it does

[warkolm (Mark Walkom)]

Just a general comment, unless you are looking to be doing processing in Logstash, you should send Beats directly to Elasticsearch.

Otherwise, what is the output from the _cat/indices?v API? Hopefully there will be some logstash- named indices.