# Problem to get Elasticsearch data into Kibana

**URL:** <https://discuss.elastic.co/t/problem-to-get-elasticsearch-data-into-kibana/14855>\
**Category:** Elasticsearch\
**Created:** [December 13, 2013, 2:18pm UTC](https://discuss.elastic.co/t/problem-to-get-elasticsearch-data-into-kibana/14855 "2013-12-13T14:18:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Clement\_Heliot](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/clement_heliot/32/1921_2.png) [@Clement\_Heliot](https://discuss.elastic.co/u/Clement_Heliot)\
**Post date:** [December 13, 2013, 2:18pm UTC](https://discuss.elastic.co/t/problem-to-get-elasticsearch-data-into-kibana/14855/1 "2013-12-13T14:18:31Z")

</div>

Hello everyone 🙂

I have setup a basic infrastructure on AWS with Elasticsearch, Logstash and  
Kibana and I am facing a weird problem, here is the details:

- I use a Elasticsearch v0.90.7

- Logstash 1.3.1

- Kibana v3 milestone 4

- The ouputlog stash configuration is as follow:

output

if [type] == "log-app1" {  
elasticsearch {  
host =\> "aws-elasticsearc-server"  
cluster =\> "log-elasticsearch-cluster"  
port =\> "9300"  
index =\> "app1-%{+YYYY.MM.dd}"  
}  
}  
}

So this create me the proper index, and when data is flowing, the following  
query result as follow  
[http://aws-elasticsearc-server:9200/app1-2013.12.13/\_search:](http://aws-elasticsearc-server:9200/app1-2013.12.13/_search:)

{  
"took" : 1,  
"timed\_out" : false,  
"\_shards" : {  
"total" : 5,  
"successful" : 5,  
"failed" : 0  
},  
"hits" : {  
"total" : 1534,  
"max\_score" : 1.0,  
"hits" : [ {  
"\_index" : "app1-2013.12.13",  
"\_type" : "logs",  
"\_id" : "qQwyAXn4QAG53denvQ8cIQ",  
"\_score" : 1.0, "\_source" : {"level":"INFO","hostname":"graph-mac.local","timestamp":"2013-12-13T10:21:45.808Z","application":"app1","class":"someClass","@timestamp":"2013-12-13T10:22:11.537Z","@version":"1","type":"log-app1","@message":"SomeMessage","tags":["\_jsonparsefailure"]}  
},

... and so on

Now, the Kibana part:

- Kibana is running behind nginx

I derive from the basic logstash dashboard, and configure the index to be [app1-]YYYY.MM.DD.

From here, I can ONLY see the fields on the table panel, so the index is found, right ? And then nothing else, I can't manage to have the log appears.

If anyone have a clue on this..., thanks for your help.

Clement.

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/da2535cb-d797-4ce6-ac61-ac379700217c%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/da2535cb-d797-4ce6-ac61-ac379700217c%40googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

**Author:** ![Clement\_Heliot](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/clement_heliot/32/1921_2.png) [@Clement\_Heliot](https://discuss.elastic.co/u/Clement_Heliot)\
**Post date:** [December 13, 2013, 3:00pm UTC](https://discuss.elastic.co/t/problem-to-get-elasticsearch-data-into-kibana/14855/2 "2013-12-13T15:00:57Z")

</div>

It turns out that using logstash v1.2.2, even with elasticsearch 0.90.7,  
the setup works as expected.

Le vendredi 13 décembre 2013 15:18:31 UTC+1, Clément Heliot a écrit :

> Hello everyone 🙂
> 
> I have setup a basic infrastructure on AWS with Elasticsearch, Logstash  
> and Kibana and I am facing a weird problem, here is the details:
> 
> - I use a Elasticsearch v0.90.7
> 
> - Logstash 1.3.1
> 
> - Kibana v3 milestone 4
> 
> - The ouputlog stash configuration is as follow:
> 
> output
> 
> if [type] == "log-app1" {  
> elasticsearch {  
> host =\> "aws-elasticsearc-server"  
> cluster =\> "log-elasticsearch-cluster"  
> port =\> "9300"  
> index =\> "app1-%{+YYYY.MM.dd}"  
> }  
> }  
> }
> 
> So this create me the proper index, and when data is flowing, the  
> following query result as follow  
> [http://aws-elasticsearc-server:9200/app1-2013.12.13/\_search:](http://aws-elasticsearc-server:9200/app1-2013.12.13/_search:)
> 
> {  
> "took" : 1,  
> "timed\_out" : false,  
> "\_shards" : {  
> "total" : 5,  
> "successful" : 5,  
> "failed" : 0  
> },  
> "hits" : {  
> "total" : 1534,  
> "max\_score" : 1.0,  
> "hits" : [ {  
> "\_index" : "app1-2013.12.13",  
> "\_type" : "logs",  
> "\_id" : "qQwyAXn4QAG53denvQ8cIQ",  
> "\_score" : 1.0, "\_source" : {"level":"INFO","hostname":"graph-mac.local","timestamp":"2013-12-13T10:21:45.808Z","application":"app1","class":"someClass","@timestamp":"2013-12-13T10:22:11.537Z","@version":"1","type":"log-app1","@message":"SomeMessage","tags":["\_jsonparsefailure"]}  
> },
> 
> ... and so on
> 
> Now, the Kibana part:
> 
> - Kibana is running behind nginx
> 
> I derive from the basic logstash dashboard, and configure the index to be [app1-]YYYY.MM.DD.
> 
> From here, I can ONLY see the fields on the table panel, so the index is found, right ? And then nothing else, I can't manage to have the log appears.
> 
> If anyone have a clue on this..., thanks for your help.
> 
> Clement.

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/57322c5e-b22d-4f62-8786-2ae2bae2d359%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/57322c5e-b22d-4f62-8786-2ae2bae2d359%40googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:01am UTC](https://discuss.elastic.co/t/problem-to-get-elasticsearch-data-into-kibana/14855/3 "2017-07-06T02:01:23Z")

</div>


