Not able to see filebeat-* index pattern in kibana

I did a fresh installation of ELK stack on a single server and installed filebeat on the same server to view and analyze the syslog.

However i am unable to see any index pattern. I am using 6.x in place of 5.x.


I would recommend posting your configurations, filebeat, logstash, elasticsearch.

HI, PFB the configs for all the components.

Kibana.yml :
elasticsearch.yml :
filebeat.yml :
logstash - input, filter and output conf:

Ok, so i installed winlogbeat and filebeat on different machine and was able to create the index. Will try to check further what was issue on the ELK server where i installed filebeat initially to get syslog.

Your filebeat configuration seems to be off.
You're sending the output to Elasticsearch, not to Logstash.

# Array of hosts to connect to.
hosts: ["localhost:9200"]

# The Logstash hosts
# hosts: ["localhost:5044"]

If you want to send it to Logstash, comment out the Elasticsearch part and uncomment the Logstash part.

Also, you turned the prospector off:

enabled: false

Which means afaik that it actually won't run. Set it to true.

I had to scrap my previous setup and create a new ELK setup. I have installed ELK on one linux machine and filebeat on Windows machine which has my IIS logs. I created a logstash pipeline for filtering IIS logs. I am unable to get my filebeat index. I installed winlodbeat on the same machine and i am able to create index for that.

Below are my configs file:
Logstash :

Is this true? Is your logstash host's name really logstashIP?

hosts: ["logstashIP:5044"]

What do the logs say?

@atira IT is hosted on AWS with public IP hence used logstashIP as just placeholder. I installed filebeat on 3 machines last night and strangely i am able to see the filebeat index for one machine and not others.

There might be some network issue in AWS.
What does the Filebeat and Logstash log say?
Unfortunately I not familiar with AWS.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.