# Problem with Docs Tutorial: Can't see Logstash Info in Kibana **URL:** \ **Category:** Kibana\ **Created:** [April 25, 2019, 1:28pm UTC](https://discuss.elastic.co/t/problem-with-docs-tutorial-cant-see-logstash-info-in-kibana/178472 "2019-04-25T13:28:52Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![jamiejackson](https://avatars.discourse-cdn.com/v4/letter/j/d07c76/32.png) [@jamiejackson](https://discuss.elastic.co/u/jamiejackson)\ **Post date:** [April 25, 2019, 1:28pm UTC](https://discuss.elastic.co/t/problem-with-docs-tutorial-cant-see-logstash-info-in-kibana/178472/1 "2019-04-25T13:28:53Z")
Hi Folks, I'm working through the tutorial, and I'm at this spot: [https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html#testing-initial-pipeline](https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html#testing-initial-pipeline) Things are going great (querying elasticsearch for the data), but when I get to the Kibana step, I don't see any entries in the "discover" view. [http://192.168.56.10:9200/logstash-2019.04.25/\_search?pretty&q=geoip.city\_name=Buffalo'](http://192.168.56.10:9200/logstash-2019.04.25/_search?pretty&q=geoip.city_name=Buffalo%27) gives: ```json { "took" : 17, "timed_out" : false, "_shards" : { "total" : 5, "successful" : 5, "skipped" : 0, "failed" : 0 }, "hits" : { "total" : 2, "max_score" : 2.5176964, "hits" : [ { "_index" : "logstash-2019.04.25", "_type" : "doc", "_id" : "BV6iVGoBViasgcCKWHHG", "_score" : 2.5176964, "_source" : { "timestamp" : "04/Jan/2015:05:29:13 +0000", "request" : "/blog/geekery/disabling-battery-in-ubuntu-vms.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+semicomplete%2Fmain+%28semicomplete.com+-+Jordan+Sissel%29", "host" : { "name" : "17c3d81a4ce8" }, "httpversion" : "1.1", "message" : "198.46.149.143 - - [04/Jan/2015:05:29:13 +0000] \"GET /blog/geekery/disabling-battery-in-ubuntu-vms.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+semicomplete%2Fmain+%28semicomplete.com+-+Jordan+Sissel%29 HTTP/1.1\" 200 9316 \"-\" \"Tiny Tiny RSS/1.11 (http://tt-rss.org/)\"", "log" : { "file" : { "path" : "/tmp/logstash-tutorial.log" } }, "verb" : "GET", "tags" : [ "beats_input_codec_plain_applied" ], "bytes" : "9316", "ident" : "-", "response" : "200", "geoip" : { "timezone" : "America/New_York", "latitude" : 42.8864, "region_name" : "New York", "postal_code" : "14202", "city_name" : "Buffalo", "country_code3" : "US", "region_code" : "NY", "longitude" : -78.8781, "ip" : "198.46.149.143", "continent_code" : "NA", "country_code2" : "US", "country_name" : "United States", "dma_code" : 514, "location" : { "lat" : 42.8864, "lon" : -78.8781 } }, "auth" : "-", "@version" : "1", "prospector" : { "type" : "log" }, "beat" : { "name" : "17c3d81a4ce8", "hostname" : "17c3d81a4ce8", "version" : "6.6.0" }, "input" : { "type" : "log" }, "clientip" : "198.46.149.143", "agent" : "\"Tiny Tiny RSS/1.11 (http://tt-rss.org/)\"", "referrer" : "\"-\"", "offset" : 22508, "@timestamp" : "2019-04-25T13:14:45.250Z", "source" : "/tmp/logstash-tutorial.log" } }, { "_index" : "logstash-2019.04.25", "_type" : "doc", "_id" : "N16iVGoBViasgcCKWXHT", "_score" : 2.5176964, "_source" : { "timestamp" : "04/Jan/2015:05:29:13 +0000", "request" : "/blog/geekery/solving-good-or-bad-problems.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+semicomplete%2Fmain+%28semicomplete.com+-+Jordan+Sissel%29", "host" : { "name" : "17c3d81a4ce8" }, "httpversion" : "1.1", "message" : "198.46.149.143 - - [04/Jan/2015:05:29:13 +0000] \"GET /blog/geekery/solving-good-or-bad-problems.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+semicomplete%2Fmain+%28semicomplete.com+-+Jordan+Sissel%29 HTTP/1.1\" 200 10756 \"-\" \"Tiny Tiny RSS/1.11 (http://tt-rss.org/)\"", "log" : { "file" : { "path" : "/tmp/logstash-tutorial.log" } }, "verb" : "GET", "tags" : [ "beats_input_codec_plain_applied" ], "bytes" : "10756", "ident" : "-", "response" : "200", "geoip" : { "timezone" : "America/New_York", "latitude" : 42.8864, "region_name" : "New York", "postal_code" : "14202", "city_name" : "Buffalo", "country_code3" : "US", "region_code" : "NY", "longitude" : -78.8781, "ip" : "198.46.149.143", "continent_code" : "NA", "country_code2" : "US", "country_name" : "United States", "dma_code" : 514, "location" : { "lat" : 42.8864, "lon" : -78.8781 } }, "auth" : "-", "@version" : "1", "prospector" : { "type" : "log" }, "beat" : { "name" : "17c3d81a4ce8", "hostname" : "17c3d81a4ce8", "version" : "6.6.0" }, "input" : { "type" : "log" }, "clientip" : "198.46.149.143", "agent" : "\"Tiny Tiny RSS/1.11 (http://tt-rss.org/)\"", "referrer" : "\"-\"", "offset" : 22795, "source" : "/tmp/logstash-tutorial.log", "@timestamp" : "2019-04-25T13:14:45.250Z" } } ] } } ``` The `logstash-2019.04.25` index shows up in Kibana's index management, too: ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/f/df6ff35ae1797b036738ed23c0457a7161c39a7d.png) However, I don't see anything in discover: ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/5/b54c6f210c50496073624955abdbc1e06ef1e631.png) Please help troubleshoot? * * * Elastic Stack 6.6.0 `first-pipeline.conf` ```auto input { beats { port => "5044" } } filter { grok { match => { "message" => "%{COMBINEDAPACHELOG}"} } geoip { source => "clientip" } } output { elasticsearch { hosts => ["192.168.56.10:9200"] } stdout { codec => rubydebug } } ``` `filebeat.yml` ```auto filebeat.inputs: - type: log paths: - /tmp/logstash-tutorial.log output.logstash: hosts: ["192.168.56.10:5044"] ``` ---
**Author:** ![DavidGo](https://avatars.discourse-cdn.com/v4/letter/d/bbe5ce/32.png) [@DavidGo](https://discuss.elastic.co/u/DavidGo)\ **Post date:** [April 25, 2019, 1:48pm UTC](https://discuss.elastic.co/t/problem-with-docs-tutorial-cant-see-logstash-info-in-kibana/178472/2 "2019-04-25T13:48:43Z")
Hi There, We are having the same problem. We can't create the kibana index pattern but the index properly exists with data in ES... We have installed the ELK in 7.0. Any help would be really appreciated. Please & thanks to help us. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 23, 2019, 1:48pm UTC](https://discuss.elastic.co/t/problem-with-docs-tutorial-cant-see-logstash-info-in-kibana/178472/3 "2019-05-23T13:48:44Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.