# Not able to see filebeat-\* index pattern in kibana **URL:** \ **Category:** Kibana\ **Created:** [April 6, 2018, 10:22am UTC](https://discuss.elastic.co/t/not-able-to-see-filebeat-index-pattern-in-kibana/127072 "2018-04-06T10:22:07Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![Parthgandhi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/parthgandhi/32/22742_2.png) [@Parthgandhi](https://discuss.elastic.co/u/Parthgandhi)\ **Post date:** [April 6, 2018, 10:22am UTC](https://discuss.elastic.co/t/not-able-to-see-filebeat-index-pattern-in-kibana/127072/1 "2018-04-06T10:22:07Z")
Hi, I did a fresh installation of ELK stack on a single server and installed filebeat on the same server to view and analyze the syslog. [http://robwillis.info/2017/04/elk-5-on-ubuntu-pt-2-installing-and-configuring-elasticsearch-logstash-kibana-nginx/](http://robwillis.info/2017/04/elk-5-on-ubuntu-pt-2-installing-and-configuring-elasticsearch-logstash-kibana-nginx/) However i am unable to see any index pattern. I am using 6.x in place of 5.x. Thanks. ---
**Author:** ![atira](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/atira/32/28699_2.png) [@atira](https://discuss.elastic.co/u/atira)\ **Post date:** [April 6, 2018, 10:37am UTC](https://discuss.elastic.co/t/not-able-to-see-filebeat-index-pattern-in-kibana/127072/2 "2018-04-06T10:37:15Z")
I would recommend posting your configurations, filebeat, logstash, elasticsearch. ---
**Author:** ![Parthgandhi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/parthgandhi/32/22742_2.png) [@Parthgandhi](https://discuss.elastic.co/u/Parthgandhi)\ **Post date:** [April 6, 2018, 11:18am UTC](https://discuss.elastic.co/t/not-able-to-see-filebeat-index-pattern-in-kibana/127072/3 "2018-04-06T11:18:22Z")
HI, PFB the configs for all the components. Kibana.yml : [https://pastebin.com/KBWEhCbJ](https://pastebin.com/KBWEhCbJ) elasticsearch.yml : [https://pastebin.com/tKXaqqCw](https://pastebin.com/tKXaqqCw) filebeat.yml : [https://pastebin.com/LiXMhA96](https://pastebin.com/LiXMhA96) logstash - input, filter and output conf: [https://pastebin.com/21JzaaYW](https://pastebin.com/21JzaaYW) ---
**Author:** ![Parthgandhi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/parthgandhi/32/22742_2.png) [@Parthgandhi](https://discuss.elastic.co/u/Parthgandhi)\ **Post date:** [April 6, 2018, 2:40pm UTC](https://discuss.elastic.co/t/not-able-to-see-filebeat-index-pattern-in-kibana/127072/4 "2018-04-06T14:40:16Z")
Ok, so i installed winlogbeat and filebeat on different machine and was able to create the index. Will try to check further what was issue on the ELK server where i installed filebeat initially to get syslog. ---
**Author:** ![atira](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/atira/32/28699_2.png) [@atira](https://discuss.elastic.co/u/atira)\ **Post date:** [April 6, 2018, 3:08pm UTC](https://discuss.elastic.co/t/not-able-to-see-filebeat-index-pattern-in-kibana/127072/5 "2018-04-06T15:08:41Z")
Your filebeat configuration seems to be off. You're sending the output to Elasticsearch, not to Logstash. > output.elasticsearch: > # Array of hosts to connect to. > hosts: ["localhost:9200"] > #output.logstash: > # The Logstash hosts > # hosts: ["localhost:5044"] If you want to send it to Logstash, comment out the Elasticsearch part and uncomment the Logstash part. Also, you turned the prospector off: > filebeat.prospectors: > ... > enabled: false Which means afaik that it actually won't run. Set it to true. ---
**Author:** ![Parthgandhi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/parthgandhi/32/22742_2.png) [@Parthgandhi](https://discuss.elastic.co/u/Parthgandhi)\ **Post date:** [April 18, 2018, 2:20pm UTC](https://discuss.elastic.co/t/not-able-to-see-filebeat-index-pattern-in-kibana/127072/6 "2018-04-18T14:20:12Z")
I had to scrap my previous setup and create a new ELK setup. I have installed ELK on one linux machine and filebeat on Windows machine which has my IIS logs. I created a logstash pipeline for filtering IIS logs. I am unable to get my filebeat index. I installed winlodbeat on the same machine and i am able to create index for that. Below are my configs file: Logstash : [https://pastebin.com/Yw413rUr](https://pastebin.com/Yw413rUr) Filebeat: [https://pastebin.com/7R1ikfQ2](https://pastebin.com/7R1ikfQ2) ---
**Author:** ![atira](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/atira/32/28699_2.png) [@atira](https://discuss.elastic.co/u/atira)\ **Post date:** [April 18, 2018, 3:01pm UTC](https://discuss.elastic.co/t/not-able-to-see-filebeat-index-pattern-in-kibana/127072/7 "2018-04-18T15:01:30Z")
Is this true? Is your logstash host's name really logstashIP? ```auto hosts: ["logstashIP:5044"] ``` What do the logs say? ---
**Author:** ![Parthgandhi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/parthgandhi/32/22742_2.png) [@Parthgandhi](https://discuss.elastic.co/u/Parthgandhi)\ **Post date:** [April 19, 2018, 7:51am UTC](https://discuss.elastic.co/t/not-able-to-see-filebeat-index-pattern-in-kibana/127072/8 "2018-04-19T07:51:34Z")
@atira IT is hosted on AWS with public IP hence used logstashIP as just placeholder. I installed filebeat on 3 machines last night and strangely i am able to see the filebeat index for one machine and not others. ---
**Author:** ![atira](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/atira/32/28699_2.png) [@atira](https://discuss.elastic.co/u/atira)\ **Post date:** [April 19, 2018, 10:02am UTC](https://discuss.elastic.co/t/not-able-to-see-filebeat-index-pattern-in-kibana/127072/9 "2018-04-19T10:02:06Z")
There might be some network issue in AWS. What does the Filebeat and Logstash log say? Unfortunately I not familiar with AWS. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 17, 2018, 10:02am UTC](https://discuss.elastic.co/t/not-able-to-see-filebeat-index-pattern-in-kibana/127072/10 "2018-05-17T10:02:57Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.