Unable to fetch mapping. Do you have indices mapping the pattern?

(ravi) #1


I am new to setting up log analyzing tools.

Initial set up of Elastic search, Kibana and Logstash looked very simple when I followed the documentation on elastic website

All 3 components and filebeat have been installed seamlessly and Kibana URL worked fine. But, to create an index to allow logstash to get the data and send it to kibana, I am unable to do it since everything is greyed out and kibana UI shows "Unable to fetch mapping. Do you have indices mapping the pattern?"
I am stuck here and am unable to troubleshoot where the issue is.

OS: Windows Server 2012 R2
It is a remote machine and doesn't have internet connection. It is in the same network as other clients from where I need the logs collected from.

Can someone please suggest how can i configure Logstash to work with Kibana? or if there is documentation available for windows install.


(Tyler Smalley) #2

What version of Kibana are you using?

When prompted with that message, you should be at a page which allows you to add the index pattern. In this case, it would be "topbeat-*" so long as the data is actually being inserted into Elasticsearch.

You can view the current indexes in Elasticsearch using the _cat/indices API

(system) #3