I'm using debian Jessie, with the
deb https://artifacts.elastic.co/packages/5.x/apt stable main source for the ELK stack packages.
I've also inserted the shakespeare test data and (I think) successfully added logstash and syslog into ES. This is what my indices output looks like:
admin@kibtest:~$ curl 'localhost:9200/_cat/indices?v' health status index uuid pri rep docs.count docs.deleted store.size pri.store.size yellow open syslog PTDJ5AyiQOmE_S-vYtU8bQ 5 1 16309 0 3mb 3mb yellow open syslog-ng zN3AabOwTcOxOp3ftYMCdg 5 1 2232 0 733.7kb 733.7kb yellow open logstash-2017.05.11 vlgAVwp9SpKYKdMb96kd3Q 5 1 1098 0 572.9kb 572.9kb yellow open shakespeare pJJ06zu0RiOFrlmrB10Mmw 5 1 111396 0 29.1mb 29.1mb yellow open .kibana t3l8tZxLSRKAfshFS1eiIA 1 1 1 0 3.1kb 3.1kb
Yet when I fire up Kibana the index button remains greyed out with the above message no matter what I type into the search string box.
I have no idea what I'm overlooking, and I've run out of things to try. Any suggestions would be welcome.
EDIT: One of the threads mentioned logging in with different roles, but I couldn't find anything resembling user access controls in Kibana so I'm not sure what they meant...
SECOND EDIT Apparently, what you need to do is install the X-Pack plugin for both ES and Kibana, then use that to authenticate. This will allow you to set up filters and proceed.