# Start-Service heartbeat fails

**URL:** <https://discuss.elastic.co/t/start-service-heartbeat-fails/323600>\
**Category:** Beats\
**Tags:** heartbeat\
**Created:** [January 20, 2023, 2:16pm UTC](https://discuss.elastic.co/t/start-service-heartbeat-fails/323600 "2023-01-20T14:16:20Z")\
**Posts on this page:** 9\
**Page:** 2

<div class="post-metadata">

**Author:** ![ppic](https://avatars.discourse-cdn.com/v4/letter/p/3da27b/32.png) [@ppic](https://discuss.elastic.co/u/ppic)\
**Post date:** [January 25, 2023, 4:13pm UTC](https://discuss.elastic.co/t/start-service-heartbeat-fails/323600/21 "2023-01-25T16:13:08Z")

</div>

I have used your file heartbeat.yml and restarted the service.

In "Discover", I get :

```auto
Time http.request.method http.response.status_code
Jan 25, 2023 @ 16:51:48.000 GET 200
Jan 25, 2023 @ 16:51:28.000 GET 200

```

That seems good !

I am surprised that It was not necessary to enable some modules, like in metricbeat where I enabled the modules system and sql...

---

<div class="post-metadata">

**Author:** ![ppic](https://avatars.discourse-cdn.com/v4/letter/p/3da27b/32.png) [@ppic](https://discuss.elastic.co/u/ppic)\
**Post date:** [January 25, 2023, 4:15pm UTC](https://discuss.elastic.co/t/start-service-heartbeat-fails/323600/22 "2023-01-25T16:15:29Z")

</div>

Is this file "http\_dashboard.ndjson" still usefull ?

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [January 25, 2023, 4:43pm UTC](https://discuss.elastic.co/t/start-service-heartbeat-fails/323600/23 "2023-01-25T16:43:33Z")

</div>

In C:\Program Files\heartbeat\kibana\7? No need

If you are using standard index, not customized, you should see data in Kibana Dashboards  
http\_dashboard.ndjson is only to import the dashboard in Kibana

Do you have a visual? Mobile One, can you copy, please? 😀

---

<div class="post-metadata">

**Author:** ![ppic](https://avatars.discourse-cdn.com/v4/letter/p/3da27b/32.png) [@ppic](https://discuss.elastic.co/u/ppic)\
**Post date:** [January 25, 2023, 5:27pm UTC](https://discuss.elastic.co/t/start-service-heartbeat-fails/323600/24 "2023-01-25T17:27:04Z")

</div>

OK, I suppressed this file.  
I my main dashboard, I use the index = "xconf-qa-\*" (like configured in the beats/modules)  
In Kibana, I found the dashboard "Heartbeat HTTP monitoring", but it uses "heartbeat-\*", then this dashboard doesn't work here. (`No matching indices found: No indices match pattern "heartbeat-*"`)

I made a simple visualisation with axes :  
- horizontal : @timestamp  
- vertical : http.response.status\_code  
 ![export (1)](https://us1.discourse-cdn.com/elastic/original/3X/4/b/4bbd580be6ede38e25dc480acfb09a60b1feb99c.png)  
(I used a wrong address in the file heartbeat.yml to get some "400")  
I don't know if this is this visual that you wanted.  
This seems to be a good starting point to get a nice graph.

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [January 25, 2023, 8:05pm UTC](https://discuss.elastic.co/t/start-service-heartbeat-fails/323600/25 "2023-01-25T20:05:21Z")

</div>

You have option:

1. Use heartbeat index:

```auto
output.elasticsearch:
  hosts: ["edaa...nt.com:9243"]
  protocol: "https"
  username: "xconf-qa-write" # this username must have rights on heartbeat-* index.
  password: "pass"
  ssl.verification_mode: none
  #index: "xconf-qa-%{[agent.version]}-%{+yyyy.MM.dd}"

```

No need changes on the dashboard "Heartbeat HTTP monitoring"  
or  
2. Change the data view to show data from Index pattern: xconf-qa-\*  
or  
3. Edit http\_dashboard.ndjson and replace index pattern refence with your xconf-qa-\* and import the dashboard again  
`"references":[{"id":"heartbeat-*","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"heartbeat-*","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}]`

 ![HB1](https://us1.discourse-cdn.com/elastic/original/3X/c/0/c00e11da59bdd42cfcdbdf7bb00359f3804aeeff.png)  
 ![HB2a](https://us1.discourse-cdn.com/elastic/original/3X/a/5/a5e44308865162e20e49f6badaec9d4639fef27a.png)  
 ![HB2b](https://us1.discourse-cdn.com/elastic/original/3X/3/d/3db885ffd9c04f1651b3db99d06a2d9feac71045.png)

---

<div class="post-metadata">

**Author:** ![ppic](https://avatars.discourse-cdn.com/v4/letter/p/3da27b/32.png) [@ppic](https://discuss.elastic.co/u/ppic)\
**Post date:** [January 26, 2023, 2:49pm UTC](https://discuss.elastic.co/t/start-service-heartbeat-fails/323600/26 "2023-01-26T14:49:51Z")

</div>

Hi Rios, thank you for your 3 options.

1. I prefer not to have several indexes to manage.
2. I would have liked this, but I couldn't find "Dataview" in "Stack management", nor elsewhere (pb of version ? I use 7.16.7, pb of rights ?)
3. In the file "http\_dashboard.ndjson" I replaced "heartbeat-" with "xconf-qa-" twice (in the part of text you showed)

This is OK !!!

I open the dashboard "Heartbeat HTTP monitoring" , and there are no more errors, and the graphs are displaying.  
There is just a message " There are too many series defined (56). The configured maximum is 50." but it only concerns the panel " HTTP duration heatmap" that I don't think it will be useful to me.

Thanks a lot!

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [January 26, 2023, 9:35pm UTC](https://discuss.elastic.co/t/start-service-heartbeat-fails/323600/27 "2023-01-26T21:35:35Z")

</div>

Data view on 8.x is Index patterns on 7.x.

> There are too many series defined.

Already mentioned on other topic: _Stack management \> Advanced settings , then look for `visualization:heatmap:maxBuckets`_

---

<div class="post-metadata">

**Author:** ![ppic](https://avatars.discourse-cdn.com/v4/letter/p/3da27b/32.png) [@ppic](https://discuss.elastic.co/u/ppic)\
**Post date:** [January 27, 2023, 11:01am UTC](https://discuss.elastic.co/t/start-service-heartbeat-fails/323600/28 "2023-01-27T11:01:43Z")

</div>

Thanks Rios.  
I now have the issue of testing multiple urls and I will open a new topic.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 24, 2023, 1:02pm UTC](https://discuss.elastic.co/t/start-service-heartbeat-fails/323600/29 "2023-02-24T13:02:29Z")

</div>

Closed on February 24, 2023, 1:02pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

[Previous page](https://discuss.elastic.co/t/start-service-heartbeat-fails/323600.md?page=1)
