I'm new to ELK, I installed ELK in three different AWS-EC2 instances and configured all the files and also installed filebeat in other server to get the logs. I can hit all the 4 servers but the problem is I can see only 2 logs in Kibana. The input path that I had declared in filebeat is "var/log/*.log" but I can read only 2 that too using ".kibana" index pattern, I'm also unable to create more indexes.
Can anyone help me on this.
Thank you, RJ
What do you get when you attempt to create another index? Do you get an error? What do the Elasticsearch logs show?
What indexes do you currently have? If you hit _cat/indices for example: http://localhost:9200/_cat/indices?v
This should help us verify if the data is making it into Elasticsearch.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.