Problem to get Elasticsearch data into Kibana

Hello everyone :slight_smile:

I have setup a basic infrastructure on AWS with Elasticsearch, Logstash and
Kibana and I am facing a weird problem, here is the details:

  • I use a Elasticsearch v0.90.7

  • Logstash 1.3.1

  • Kibana v3 milestone 4

  • The ouputlog stash configuration is as follow:

output

if [type] == "log-app1" {
elasticsearch {
host => "aws-elasticsearc-server"
cluster => "log-elasticsearch-cluster"
port => "9300"
index => "app1-%{+YYYY.MM.dd}"
}
}
}

So this create me the proper index, and when data is flowing, the following
query result as follow
http://aws-elasticsearc-server:9200/app1-2013.12.13/_search:

{
"took" : 1,
"timed_out" : false,
"_shards" : {
"total" : 5,
"successful" : 5,
"failed" : 0
},
"hits" : {
"total" : 1534,
"max_score" : 1.0,
"hits" : [ {
"_index" : "app1-2013.12.13",
"_type" : "logs",
"_id" : "qQwyAXn4QAG53denvQ8cIQ",
"_score" : 1.0, "_source" : {"level":"INFO","hostname":"graph-mac.local","timestamp":"2013-12-13T10:21:45.808Z","application":"app1","class":"someClass","@timestamp":"2013-12-13T10:22:11.537Z","@version":"1","type":"log-app1","@message":"SomeMessage","tags":["_jsonparsefailure"]}
},

... and so on

Now, the Kibana part:

  • Kibana is running behind nginx

I derive from the basic logstash dashboard, and configure the index to be [app1-]YYYY.MM.DD.

From here, I can ONLY see the fields on the table panel, so the index is found, right ? And then nothing else, I can't manage to have the log appears.

If anyone have a clue on this..., thanks for your help.

Clement.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/da2535cb-d797-4ce6-ac61-ac379700217c%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

It turns out that using logstash v1.2.2, even with elasticsearch 0.90.7,
the setup works as expected.

Le vendredi 13 décembre 2013 15:18:31 UTC+1, Clément Heliot a écrit :

Hello everyone :slight_smile:

I have setup a basic infrastructure on AWS with Elasticsearch, Logstash
and Kibana and I am facing a weird problem, here is the details:

  • I use a Elasticsearch v0.90.7

  • Logstash 1.3.1

  • Kibana v3 milestone 4

  • The ouputlog stash configuration is as follow:

output

if [type] == "log-app1" {
elasticsearch {
host => "aws-elasticsearc-server"
cluster => "log-elasticsearch-cluster"
port => "9300"
index => "app1-%{+YYYY.MM.dd}"
}
}
}

So this create me the proper index, and when data is flowing, the
following query result as follow
http://aws-elasticsearc-server:9200/app1-2013.12.13/_search:

{
"took" : 1,
"timed_out" : false,
"_shards" : {
"total" : 5,
"successful" : 5,
"failed" : 0
},
"hits" : {
"total" : 1534,
"max_score" : 1.0,
"hits" : [ {
"_index" : "app1-2013.12.13",
"_type" : "logs",
"_id" : "qQwyAXn4QAG53denvQ8cIQ",
"_score" : 1.0, "_source" : {"level":"INFO","hostname":"graph-mac.local","timestamp":"2013-12-13T10:21:45.808Z","application":"app1","class":"someClass","@timestamp":"2013-12-13T10:22:11.537Z","@version":"1","type":"log-app1","@message":"SomeMessage","tags":["_jsonparsefailure"]}
},

... and so on

Now, the Kibana part:

  • Kibana is running behind nginx

I derive from the basic logstash dashboard, and configure the index to be [app1-]YYYY.MM.DD.

From here, I can ONLY see the fields on the table panel, so the index is found, right ? And then nothing else, I can't manage to have the log appears.

If anyone have a clue on this..., thanks for your help.

Clement.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/57322c5e-b22d-4f62-8786-2ae2bae2d359%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.