Unable to install template to Elasticsearch

(paul) #1


I have copied the 5 Alpha 2 template to my ELK stack and now trying to add it but when I do:

curl -XPUT http://localhost:9200/_template/winlogbeat -d winlogbeat.template.json in the same directory that holds the json file it fails with the following error:

{"error":{"root_cause":[{"type":"parse_exception","reason":"Failed to derive xcontent"}],"type":"parse
_exception","reason":"Failed to derive xcontent"},"status":400}

Any ideas?

(Kevin Csuka) #2

I think what you're trying to do is to put the winlogbeat.template.json in Elasticsearch.
Is it possible for you to upload it from another source?

And change try to change localhost to the IP-adres, instead of localhost.

I also think that the CURL command you give isn't correct. (I'm not sure!)
How I did it:

I downloaded the winlogbeat.template.json, and uploaded it in /Installs/
I logged on to my Elasticsearch server, which has, and performed the following code:
curl -XPUT -d@/installs/winlogbeat.template.json
(Notice the '@')

What does your Elasticsearch log says?
Did you try to restart Elasticsearch? And on what platform is your Elasticsearch currently running

(Mark Walkom) #3

curl -XPUT http://localhost:9200/_template/winlogbeat -d @winlogbeat.template.json

You forgot the @.

(paul) #4


Thank you

(Andrew Kroh) #5