# Topbeat logs not showed in kibana

**URL:** <https://discuss.elastic.co/t/topbeat-logs-not-showed-in-kibana/87536>\
**Category:** Beats\
**Created:** [May 30, 2017, 9:23am UTC](https://discuss.elastic.co/t/topbeat-logs-not-showed-in-kibana/87536 "2017-05-30T09:23:49Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![marcmga](https://avatars.discourse-cdn.com/v4/letter/m/3bc359/32.png) [@marcmga](https://discuss.elastic.co/u/marcmga)\
**Post date:** [May 30, 2017, 9:23am UTC](https://discuss.elastic.co/t/topbeat-logs-not-showed-in-kibana/87536/1 "2017-05-30T09:23:49Z")

</div>

Hi,

This is weird because yesterday i could see a graphic with topbeat metrics. However, sinoce 02:00 am i can't se anything coming from topbeat i kibana. Although the logs are received in elasticsearch.  
What can i do to isolate this error? where it comes from?

Thanks

---

<div class="post-metadata">

**Author:** ![tudor](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tudor/32/3753_2.png) [@tudor](https://discuss.elastic.co/u/tudor)\
**Post date:** [May 30, 2017, 9:36am UTC](https://discuss.elastic.co/t/topbeat-logs-not-showed-in-kibana/87536/2 "2017-05-30T09:36:20Z")

</div>

You can try to use the Kibana Discover tab to check what events are in ES.

---

<div class="post-metadata">

**Author:** ![marcmga](https://avatars.discourse-cdn.com/v4/letter/m/3bc359/32.png) [@marcmga](https://discuss.elastic.co/u/marcmga)\
**Post date:** [May 30, 2017, 11:07am UTC](https://discuss.elastic.co/t/topbeat-logs-not-showed-in-kibana/87536/3 "2017-05-30T11:07:29Z")

</div>

Yes i did.  
That's weird. In discovery i receive logs coming from topbeat. They look ok.  
i.e:

> {  
> "\_index": "topbeat-2017.05.30",  
> "\_type": "process",  
> "\_id": "AVxY-b-y6TD-zjntkVEw",  
> "\_score": null,  
> "\_source": {  
> "@timestamp": "2017-05-30T11:00:40.394Z",  
> "beat": {  
> "hostname": "host1",  
> "name": "host1"  
> },  
> "count": 1,  
> "proc": {  
> "cmdline": "jsvc.exec (deleted....)",  
> "cpu": {  
> "user": 77952920,  
> "user\_p": 0.4008,  
> "system": 4275580,  
> "total": 82228500,  
> "start\_time": "May25"  
> },  
> "mem": {  
> "size": 7072964608,  
> "rss": 3001061376,  
> "rss\_p": 0.36,  
> "share": 6053888  
> },  
> "name": "jsvc",  
> "pid": 1885,  
> "ppid": 1884,  
> "state": "sleeping",  
> "username": "root"  
> },  
> "type": "process"  
> },  
> "fields": {  
> "@timestamp": [  
> 1496142040394  
> ]  
> },  
> "sort": [  
> 1496142040394  
> ]  
> }

As you can see, in proc.cpu.user\_p there's data (0.40... means 40% as i can see in discovery tab)  
However in visualize i see nothing.  
i created a area chart, metric is average by proc.user.cpu\_p, then x axis is timestamp... but nothing is showed

In settings undex topbeat-\* index, the proc.user.cp\_p field is of type number and format: Percentage

What i'm missing?

Thanks

---

<div class="post-metadata">

**Author:** ![tudor](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tudor/32/3753_2.png) [@tudor](https://discuss.elastic.co/u/tudor)\
**Post date:** [May 31, 2017, 7:30am UTC](https://discuss.elastic.co/t/topbeat-logs-not-showed-in-kibana/87536/4 "2017-05-31T07:30:41Z")

</div>

Do you mean `proc.cpu.user_p`? I don't see a `cpu_p` field.

Btw, I strongly recommend upgrading to Metricbeat 5.x. It's compatible with ES 2.x and it fixes tons of things.

---

<div class="post-metadata">

**Author:** ![marcmga](https://avatars.discourse-cdn.com/v4/letter/m/3bc359/32.png) [@marcmga](https://discuss.elastic.co/u/marcmga)\
**Post date:** [May 31, 2017, 8:05am UTC](https://discuss.elastic.co/t/topbeat-logs-not-showed-in-kibana/87536/5 "2017-05-31T08:05:27Z")

</div>

Hi Tudor,

Yes, i ment proc.cpu.user\_p  
I solved it by reinstalling the template so you can close this topic.

In case someone is having this issue, try reinstalling topbeat template.

Thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 20, 2017, 9:23am UTC](https://discuss.elastic.co/t/topbeat-logs-not-showed-in-kibana/87536/6 "2017-06-20T09:23:50Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.