Problem to get data into Kibana

(Clément Heliot) #1

Hello everyone :slight_smile:

I have setup a basic infrastructure on AWS with Elasticsearch, Logstash and
Kibana and I am facing a weird problem, here is the details:

  • I use a Elasticsearch v0.90.7

  • Logstash 1.3.1

  • Kibana v3 milestone 4

  • The ouputlog stash configuration is as follow:


if [type] == "log-app1" {
elasticsearch {
host => "aws-elasticsearc-server"
cluster => "log-elasticsearch-cluster"
port => "9300"
index => "app1-%{+YYYY.MM.dd}"

So this create me the proper index, and when data is flowing, the following
query result as
follow http://aws-elasticsearc-server:9200/app1-2013.12.13/_search:

"took" : 1,
"timed_out" : false,
"_shards" : {
"total" : 5,
"successful" : 5,
"failed" : 0
"hits" : {
"total" : 1534,
"max_score" : 1.0,
"hits" : [ {
"_index" : "tracking-2013.12.13",
"_type" : "logs",
"_id" : "qQwyAXn4QAG53denvQ8cIQ",
"_score" : 1.0, "_source" : {"level":"INFO","hostname":"graph-mac.local","timestamp":"2013-12-13T10:21:45.808Z","application":"app1","class":"someClass","@timestamp":"2013-12-13T10:22:11.537Z","@version":"1","type":"log-app1","@message":"SomeMessage","tags":["_jsonparsefailure"]}

... and so on

Now, the Kibana part:

  • Kibana is running behind nginx

I derive from the basic logstash dashboard, and configure the index to be [app1-]YYYY.MM.DD.

From here, I can ONLY see the fields on the table panel, so the index is found, right ? And then nothing else, I can't manage to have the log appears.

If anyone have a clue on this..., thanks for your help.


You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
To view this discussion on the web visit
For more options, visit

(system) #2