Unable to load the sample dashboard for auditbeat7.2.0

HI,

Im unable to load the auditbeat 7.2.0 dashboard from the server.Please find the error below

# auditbeat setup --dashboards
Loading dashboards (Kibana must be running and reachable)
Exiting: Failed to import dashboard: Failed to load directory /usr/share/auditbeat/kibana/7/dashboard:
  error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-file-integrity.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face {   font-family: 'Open Sans';   font-st... (truncated)
  error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-kernel-executions.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face {   font-family: 'Open Sans';   font-st... (truncated)
  error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-kernel-overview.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face {   font-family: 'Open Sans';   font-st... (truncated)
  error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-kernel-sockets.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face {   font-family: 'Open Sans';   font-st... (truncated)
  error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-system-host-dashboard.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face {   font-family: 'Open Sans';   font-st... (truncated)
  error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-system-login-dashboard.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face {   font-family: 'Open Sans';   font-st... (truncated)
  error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-system-overview-dashboard.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face {   font-family: 'Open Sans';   font-st... (truncated)
  error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-system-package-dashboard.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face {   font-family: 'Open Sans';   font-st... (truncated)
  error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-system-process-dashboard.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face {   font-family: 'Open Sans';   font-st... (truncated)
  error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-system-socket-dashboard.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face {   font-family: 'Open Sans';   font-st... (truncated)
  error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-system-user-dashboard.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face {   font-family: 'Open Sans';   font-st... (truncated)

Below is my auditbeat conf file

#cat /etc/auditbeat/auditbeat.yml 
#======================================= General ========================================
tags: auditlog

queue: 
  mem:
    events: 4096
    flush:
      min_events: 2048
      timeout: 1s

logging.level: info
logging.to_files: true
logging.files:
  path: /var/log/auditbeat
  name: auditbeat
  keepfiles: 7
  permissions: 0644

#========================================= modules ======================================
auditbeat.modules:
  - module: system
    datasets:
      - host
      - login 
    period: 10m
    state.period: 2h
    user.detect_password_changes: True
    login.wtmp_file_pattern: /var/log/wtmp*
    login.btmp_file_pattern: /var/log/btmp*



#======================================== outputs =======================================
output.kafka:
  enabled: True
  hosts: ["auditlog-kafka-1.xxx.in:9092", "auditlog-kafka-2.xxx.in:9092"]
  topic: 'auditbeat'
  partition:
    hash:
      reachable_only: False
      hash: []
  username: 
  password: 
  version: 0.10.0
  metadata:
    retry:
      max: 3
      backoff: 250ms  
  worker: 1
  max_retires: 3
  bulk_max_size: 2048
  timeout: 30s
  broker_timeout: 10s
  channel_buffer_size: 256
  compression: gzip
  max_message_bytes: 1000000
  required_acks: 1
  client_id: beats



#======================================== configure kibana viz =======================================
setup.kibana:
  host: "IP:5601"

setup.dashboards.enabled: true

Please help me to create a dashboard

Any update on this please....

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.