# What is my "index patter"? **URL:** \ **Category:** Kibana\ **Created:** [June 19, 2017, 8:32am UTC](https://discuss.elastic.co/t/what-is-my-index-patter/89900 "2017-06-19T08:32:32Z")\ **Posts on this page:** 13\ **Page:** 3
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [July 21, 2017, 1:49pm UTC](https://discuss.elastic.co/t/what-is-my-index-patter/89900/44 "2017-07-21T13:49:29Z")
That is just the internal Kibana index. If that is all you see, you have no data in the cluster to visualise, so you will not be able to define any index pattern in Kibana as no mappings for that pattern can be found. If you index some data and are able to see some other index when you run `_cat/shards` you should be able to create an index pattern and explore that data. ---
**Author:** ![hack3rcon](https://avatars.discourse-cdn.com/v4/letter/h/96bed5/32.png) [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Post date:** [July 22, 2017, 5:38am UTC](https://discuss.elastic.co/t/what-is-my-index-patter/89900/45 "2017-07-22T05:38:52Z")
Honestly, I can't understand you mean. I just want to see the Windows OS Event Logs via ELK. Is my configuration wrong? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [July 22, 2017, 7:34am UTC](https://discuss.elastic.co/t/what-is-my-index-patter/89900/46 "2017-07-22T07:34:32Z")
If the Kibana index is the only index in the cluster, there are no event logs being indexed that you can visualise. ---
**Author:** ![hack3rcon](https://avatars.discourse-cdn.com/v4/letter/h/96bed5/32.png) [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Post date:** [July 22, 2017, 12:02pm UTC](https://discuss.elastic.co/t/what-is-my-index-patter/89900/47 "2017-07-22T12:02:04Z")
What is my option? Can you provide any help? My logs collected via Syslog-ng and stored on my server but how can I display it? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [July 22, 2017, 12:14pm UTC](https://discuss.elastic.co/t/what-is-my-index-patter/89900/48 "2017-07-22T12:14:16Z")
You will need to index them into Elasticsearch. For this you can use [Filebeat](https://www.elastic.co/guide/en/beats/filebeat/current/index.html) and/or [Logstash](https://www.elastic.co/guide/en/logstash/current/index.html). The Logstash config you provided in your initial post seem to be taken from some outdated guide, as the options have since changed, so it is better to start based on the [official documentation](https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html). ---
**Author:** ![hack3rcon](https://avatars.discourse-cdn.com/v4/letter/h/96bed5/32.png) [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Post date:** [July 22, 2017, 1:09pm UTC](https://discuss.elastic.co/t/what-is-my-index-patter/89900/49 "2017-07-22T13:09:12Z")
Thank you. Is Filebeat mandatory? If possible I just need Logstash. Can you correct my Logstash config file? Thank you. ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [July 22, 2017, 3:40pm UTC](https://discuss.elastic.co/t/what-is-my-index-patter/89900/50 "2017-07-22T15:40:15Z")
You can do it with just Logstash using a file input plugin. ---
**Author:** ![hack3rcon](https://avatars.discourse-cdn.com/v4/letter/h/96bed5/32.png) [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Post date:** [July 23, 2017, 5:32am UTC](https://discuss.elastic.co/t/what-is-my-index-patter/89900/51 "2017-07-23T05:32:17Z")
File input plugin? How? ---
**Author:** ![hack3rcon](https://avatars.discourse-cdn.com/v4/letter/h/96bed5/32.png) [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Post date:** [July 30, 2017, 5:39am UTC](https://discuss.elastic.co/t/what-is-my-index-patter/89900/52 "2017-07-30T05:39:36Z")
Any help? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [July 30, 2017, 6:59am UTC](https://discuss.elastic.co/t/what-is-my-index-patter/89900/53 "2017-07-30T06:59:04Z")
You had a Logstash config in your first post, where I pointed out some errors in the Elasticsearch output section. This seems to be a good starting point. Have you had a look at the documentation? What have you tried since? Where are you having issues? ---
**Author:** ![hack3rcon](https://avatars.discourse-cdn.com/v4/letter/h/96bed5/32.png) [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Post date:** [July 30, 2017, 2:42pm UTC](https://discuss.elastic.co/t/what-is-my-index-patter/89900/54 "2017-07-30T14:42:44Z")
As you see I corrected Elasticsearch config and posted it here. About Logstash, I removed my config and used default config of Logstash but not worked. I don't know what is my problem is ☹ ---
**Author:** ![hack3rcon](https://avatars.discourse-cdn.com/v4/letter/h/96bed5/32.png) [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Post date:** [August 12, 2017, 1:46pm UTC](https://discuss.elastic.co/t/what-is-my-index-patter/89900/56 "2017-08-12T13:46:56Z")
Hello. I see something below in documents: ```auto input { beats { port => "5043" } } output { elasticsearch { hosts => ["localhost:9200"] } } ``` I can't understand what is "beats" ? How about "first-pipeline.conf " file? My input is a file not anything. How can I introduce a file as input? Any idea? Thank you. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [September 9, 2017, 1:47pm UTC](https://discuss.elastic.co/t/what-is-my-index-patter/89900/57 "2017-09-09T13:47:00Z")
Closed on September 9, 2017, 1:47pm UTC This topic was automatically closed 28 days after the last reply. New replies are no longer allowed. [Previous page](https://discuss.elastic.co/t/what-is-my-index-patter/89900.md?page=2)