# Not seeing any data in the monitoring tab

**URL:** https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018
**Category:** Kibana
**Tags:** elastic-stack-monitoring
**Created:** [May 7, 2019, 3:43pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018 "2019-05-07T15:43:00Z")
**Posts on this page:** 20
**Page:** 2

<div class="post-metadata">

### Author: ![syedsfayaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syedsfayaz/32/46657_2.png) [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)
#### Post date: [May 9, 2019, 6:39pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/21 "2019-05-09T18:39:50Z")

</div>

If you are referring to the out put am seeing in kibana for heartbeat .

```
{
  "_index": "heartbeat-2019.05.08-000001",
  "_type": "_doc",
  "_id": "rMbhnWoB3maiDp4b8tnO",
  "_version": 1,
  "_score": null,
  "_source": {
    "@timestamp": "2019-05-09T18:36:30.778Z",
    "tls": {
      "rtt": {
        "handshake": {
          "us": 17418
        }
      },
      "certificate_not_valid_before": "0001-01-01T00:00:00.000Z"
    },
    "fields": {
      "version": "10.6"
    },
    "agent": {
      "ephemeral_id": "3749dae6-fa12-445e-a247-b01ac8b6a4be",
      "hostname": "hostname1.changed.com",
      "id": "2ad2e338-bbe9-4068-b6fc-fc60e7cc1d71",
      "version": "7.0.0",
      "type": "heartbeat"
    },
    "monitor": {
      "type": "http",
      "check_group": "157de181-7289-11e9-a7d1-005056ac9316",
      "ip": "127.0.0.1",
      "status": "up",
      "duration": {
        "us": 40478
      },
      "id": "auto-http-0XEB9699FEE4978E58",
      "name": ""
    },
    "summary": {
      "up": 1,
      "down": 0
    },
    "tcp": {
      "rtt": {
        "connect": {
          "us": 144
        }
      }
    },
    "event": {
      "dataset": "uptime"
    },
    "ecs": {
      "version": "1.0.0"
    },
    "host": {
      "name": "hostname1.changed.com",
      "hostname": "hostname1.changed.com",
      "architecture": "x86_64",
      "os": {
        "platform": "rhel",
        "version": "7.5 (Maipo)",
        "family": "redhat",
        "name": "Red Hat Enterprise Linux Server",
        "kernel": "3.10.0-862.14.4.el7.x86_64",
        "codename": "Maipo"
      },
      "id": "0709cd0acc86463da7d518c28f145a66",
      "containerized": true
    },
    "http": {
      "rtt": {
        "response_header": {
          "us": 1722
        },
        "validate": {
          "us": 1773
        },
        "content": {
          "us": 50
        },
        "total": {
          "us": 39971
        },
        "write_request": {
          "us": 48
        }
      },
      "response": {
        "status_code": 200
      }
    },
    "resolve": {
      "rtt": {
        "us": 306
      },
      "ip": "127.0.0.1"
    },
    "url": {
      "scheme": "https",
      "domain": "hostname1.changed.com",
      "port": 7443,
      "path": "/home",
      "full": "https://hostname1.changed.com:7443"
    }
  },
  "fields": {
    "@timestamp": [
      "2019-05-09T18:36:30.778Z"
    ],
    "tls.certificate_not_valid_before": [
      "0001-01-01T00:00:00.000Z"
    ]
  },
  "sort": [
    1557426990778
  ]
}
```

---

<div class="post-metadata">

### Author: ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [May 9, 2019, 6:44pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/22 "2019-05-09T18:44:15Z")

</div>

What confuses me is that you don't have any `_source` in the response and I think you should.

What does this show?

```auto
POST .monitoring-es-*/_search
{
  "size": 1,
  "query": {
    "bool": {
      "filter": [
        {
          "term": {
            "type": "cluster_stats"
          }
        }
      ]
    }
  },
  "sort": {
    "timestamp": {
      "order": "desc"
    }
  }
}

```

---

<div class="post-metadata">

### Author: ![syedsfayaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syedsfayaz/32/46657_2.png) [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)
#### Post date: [May 9, 2019, 6:53pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/23 "2019-05-09T18:53:05Z")

</div>

Can you tell me where I can add that. Do I need to delete any template and add it.

```
{
  "took" : 11,
  "timed_out" : false,
  "_shards" : {
    "total" : 8,
    "successful" : 8,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 10000,
      "relation" : "gte"
    },
    "max_score" : null,
    "hits" : [
      {
        "_index" : ".monitoring-es-7-2019.05.09",
        "_type" : "_doc",
        "_id" : "rMfwnWoB3maiDp4bzAXs",
        "_score" : null,
        "sort" : [
          1557427965086
        ]
      }
    ]
  }
}
```

---

<div class="post-metadata">

### Author: ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [May 9, 2019, 7:05pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/24 "2019-05-09T19:05:25Z")

</div>

Can you run and return the result of this:  
`GET .monitoring-es-7-*/_mapping`

---

<div class="post-metadata">

### Author: ![syedsfayaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syedsfayaz/32/46657_2.png) [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)
#### Post date: [May 9, 2019, 7:09pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/25 "2019-05-09T19:09:13Z")

</div>

> <https://gist.github.com/syedsfayaz/1ba07f0c6f9a9a13fea84dfd2c7edf58>

---

<div class="post-metadata">

### Author: ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [May 9, 2019, 7:12pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/26 "2019-05-09T19:12:13Z")

</div>

```auto
".monitoring-es-7-2019.05.09" : {
        "mappings" : {
          "dynamic" : "false",
          "_source" : {
            "enabled" : false
          },

```

Here is your problem. The source is disabled.

Do you see the same property set in the result of this call:  
`GET _template/.monitoring-es`

---

<div class="post-metadata">

### Author: ![syedsfayaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syedsfayaz/32/46657_2.png) [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)
#### Post date: [May 9, 2019, 7:16pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/27 "2019-05-09T19:16:01Z")

</div>

I don't see \_source field here.

> <https://gist.github.com/syedsfayaz/ee9ddc8d759d8948630d288a1f7aa2ed>

---

<div class="post-metadata">

### Author: ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [May 9, 2019, 7:17pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/28 "2019-05-09T19:17:48Z")

</div>

If you look at the previous days monitoring indices, do you see the same `_source.enabled: false`? Also, look at any other `.monitoring-*` indices as well. I'm trying to understand what might be causing this.

---

<div class="post-metadata">

### Author: ![syedsfayaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syedsfayaz/32/46657_2.png) [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)
#### Post date: [May 9, 2019, 7:23pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/29 "2019-05-09T19:23:38Z")

</div>

Yes, In the previous indices I see it as false.

```
 "_source": {
      "enabled": false

```

This is for kibana

```
"mapping": {
    "dynamic": "false",
    "_source": {
      "enabled": false
    },
```

---

<div class="post-metadata">

### Author: ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [May 9, 2019, 7:31pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/30 "2019-05-09T19:31:10Z")

</div>

Can you post the response of `GET _template`? It will be long but we need to find out if another template exists that is applying this setting for the `.monitoring-*` indices (I suspect there is)

---

<div class="post-metadata">

### Author: ![syedsfayaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syedsfayaz/32/46657_2.png) [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)
#### Post date: [May 9, 2019, 7:39pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/31 "2019-05-09T19:39:08Z")

</div>

```
.monitoring-alerts [.monitoring-alerts-6] 0 6050399
.monitoring-es [.monitoring-es-7-*] 0 7000099
.ml-anomalies- [.ml-anomalies-*] 0 7000099
.watch-history-9 [.watcher-history-9*] 2147483647 
.monitoring-beats [.monitoring-beats-7-*] 0 7000099
.monitoring-kibana [.monitoring-kibana-7-*] 0 7000099
.watches [.watches*] 2147483647 
.ml-notifications [.ml-notifications] 0 7000099
.monitoring-alerts-7 [.monitoring-alerts-7] 0 7000099
.ml-state [.ml-state*] 0 7000099
.ml-config [.ml-config] 0 7000099

```

> <https://gist.github.com/syedsfayaz/4bc4e73f9da21e1fcd7807a49ed39701>

---

<div class="post-metadata">

### Author: ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [May 9, 2019, 7:41pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/32 "2019-05-09T19:41:44Z")

</div>

Found it.

```auto
 "template_1" : {
    "order" : 0,
    "index_patterns" : [
      "*"
    ],
    "settings" : {
      "index" : {
        "number_of_shards" : "1"
      }
    },
    "mappings" : {
      "_source" : {
        "enabled" : false
      }
    },
    "aliases" : { }
  },

```

Deleting that template will fix it. However, this might have been added for a reason so perhaps redo this so it excludes `.monitoring-*` indices.

Once you resolve that, the next index created (for tomorrow) will then start containing the `_source` and the monitoring UI should start working. Alternatively, you can delete all `.monitoring-*` indices (after deleting the template) as those don't even have data right now. With this route, you should start seeing monitoring data in the UI soon after.

---

<div class="post-metadata">

### Author: ![syedsfayaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syedsfayaz/32/46657_2.png) [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)
#### Post date: [May 9, 2019, 8:28pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/33 "2019-05-09T20:28:28Z")

</div>

Thank you. Will try your solution.

---

<div class="post-metadata">

### Author: ![syedsfayaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syedsfayaz/32/46657_2.png) [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)
#### Post date: [May 9, 2019, 8:32pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/34 "2019-05-09T20:32:18Z")

</div>

After deleting the template and deleting monitoring indices. I am able to see the monitoring dashboard. Thanks for helping me out.

---

<div class="post-metadata">

### Author: ![syedsfayaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syedsfayaz/32/46657_2.png) [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)
#### Post date: [May 9, 2019, 9:03pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/35 "2019-05-09T21:03:26Z")

</div>

@chrisronline One last thing. My uptime dashboard is also blank. Just wondering if its the same issue which is stopping the data to be shown on up-time dashboard.

> [@No data in uptime dashboard](https://discuss.elastic.co/t/no-data-in-uptime-dashboard/179651/5):
>
> Can you post the results of GET /\_cat/indices and GET /\_cat/aliases? We don't need everything, but we do need everything containing heartbeat.

---

<div class="post-metadata">

### Author: ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [May 10, 2019, 12:52pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/36 "2019-05-10T12:52:21Z")

</div>

Most likely, yes. That index template was causing every indexed document to contain no source which means there is basically no data in those documents.

---

<div class="post-metadata">

### Author: ![syedsfayaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syedsfayaz/32/46657_2.png) [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)
#### Post date: [May 10, 2019, 4:18pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/37 "2019-05-10T16:18:20Z")

</div>

I mean am still not seeing any thing on my uptime dashboard. I believe it gets data from heartbeat index. I already deleted the template which was causing monitoring tab to not display.

---

<div class="post-metadata">

### Author: ![syedsfayaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syedsfayaz/32/46657_2.png) [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)
#### Post date: [May 10, 2019, 4:21pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/38 "2019-05-10T16:21:26Z")

</div>

My Heartbeat template.

```
       "mappings" : {
          "_meta" : {
            "beat" : "heartbeat",
            "version" : "7.0.0"
          },
          "_source" : {
            "enabled" : true
          },
          "dynamic_templates" : [
            {
```

---

<div class="post-metadata">

### Author: ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [May 10, 2019, 4:29pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/39 "2019-05-10T16:29:40Z")

</div>

Check the mappings for the most recent heartbeat index. Is the source enabled or disabled there?

---

<div class="post-metadata">

### Author: ![syedsfayaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syedsfayaz/32/46657_2.png) [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)
#### Post date: [May 10, 2019, 6:10pm UTC](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018/40 "2019-05-10T18:10:41Z")

</div>

I don't see a \_source field in my index mapping. But in heartbeat template I can see the \_source enabled. Do you think its taking picking this change from some other template?

I tried to delete the heartbeat template and create new template but no change.

[Previous page](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018.md?page=1)

[Next page](https://discuss.elastic.co/t/not-seeing-any-data-in-the-monitoring-tab/180018.md?page=3)