Problem with Dashboard on system module (URGENT)

[khergner (Korhan Herguner)]

Hi,
I get the following error, I don't understand why this is happening. Why not load values?
Logstash

input {
  beats {
    port => 5044
  }
}

output {
  elasticsearch {
    hosts => ["http://172.28.26.152:9200"]
	manage_template => false
    index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
  }
}

System.module

- module: system
  period: 10s
  enabled: true
  processes: ['.*']
  
  metricsets:
    - cpu
    - memory
    - network
    - process
    - process_summary
    - diskio
    - core
    
  cpu.metrics:  ["percentages"]  # The other available options are normalized_percentages and ticks.
  core.metrics: ["percentages"]  # The other available option is ticks.
  
  process.include_top_n:
    by_cpu: 5      # include top 5 processes by CPU
    by_memory: 5   # include top 5 processes by memory

- module: system
  period: 1m
  metricsets:
    - filesystem
    - fsstat

- module: system
  period: 10s
  metricsets:
    - uptime

The Logstash hosts

output.logstash:
  hosts: ["172.28.26.152:5044"]

Picture 1

Picture2

[khergner (Korhan Herguner)]

I use bellow system component

Kibana version:
6.6.1
Logstash version:
6.6.1
Elasticsearch version:
6.6.1
Metricbeat version:
6.6.1
OS version:
Windows server 12

[ruflin]

Did you load the index template for metricbeat?

[khergner (Korhan Herguner)]

How do I do?

[khergner (Korhan Herguner)]

is this picture?

[ruflin]

I was referring to the elasticsearch index template: https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-templates.html If you send data to Elasticsearch from Metricbeat, it loads it automatically, if you send it through Logstash, you need to load it manually.

[khergner (Korhan Herguner)]

I think this problem is very hard. I use approach Beat ---> Logstash --> Elastic --> Kibana so can you share example for metricbeat ?

[khergner (Korhan Herguner)]

Hi Ruflin
I solved the problem. As you say load metricbeat field manually. My solution approach;

setup.template.name: "metricbeat"
setup.template.fields: "fields.yml"
setup.template.overwrite: false

Thank you for response
Best Regards

[ruflin]

Glad you found the solution and thanks for sharing.