New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Couldn't find any Elasticsearch data #74

Closed
kcxg opened this Issue Dec 7, 2018 · 7 comments

Comments

Projects
None yet
2 participants
@kcxg

kcxg commented Dec 7, 2018

when i start kibana and looking in management tab it is displaying message :
"Couldn't find any Elasticsearch data
You'll need to index some data into Elasticsearch before you can create an index pattern "

@sadsfae

This comment has been minimized.

Owner

sadsfae commented Dec 7, 2018

when i start kibana and looking in management tab it is displaying message :
"Couldn't find any Elasticsearch data
You'll need to index some data into Elasticsearch before you can create an index pattern "

Hi @kcxg are you following the post-setup steps to create an index pattern first before hand?

https://github.com/sadsfae/ansible-elk/#create-your-kibana-index-pattern

If so what does this report from your ELK node?

curl -GET http://localhost:9200/_cat/indices
@kcxg

This comment has been minimized.

kcxg commented Dec 7, 2018

I followed the post-setup steps to create an index pattern first before hand

`$curl -GET http://localhost:9200/_cat/indices

green open .kibana_1 n7-42WjmTfyZn5uHvH0qoA 1 0 174 9 260.3kb 260.3kb
`

@sadsfae

This comment has been minimized.

Owner

sadsfae commented Dec 7, 2018

I followed the post-setup steps to create an index pattern first before hand

`$curl -GET http://localhost:9200/_cat/indices

green open .kibana_1 n7-42WjmTfyZn5uHvH0qoA 1 0 174 9 260.3kb 260.3kb
`

Ok, that looks good. When you created the Index pattern you should be using logstash-* as the name for logstash to properly send data, I don't see that there - can you try creating that under management --> Kibana Index Patterns

Mine looks like this after adding a logstash-* pattern, clicking next, selecting @timestamp and create index.

screenshot_2018-12-07_15-59-24

# curl -GET http://localhost:9200/_cat/indices
yellow open logstash-2018.12.07 Rrf7uT0lSh6MtCWOcvyO3Q 5 1 242 0 754.2kb 754.2kb
green  open .kibana_1           nVuii57WRPGz-Qx69QR6KA 1 0   4 0  23.1kb  23.1
@kcxg

This comment has been minimized.

kcxg commented Dec 7, 2018

I add a logstash-* pattern but cant click next
image

I installed it twice and had the same problem.

@kcxg

This comment has been minimized.

kcxg commented Dec 7, 2018

I add a logstash-* pattern but cant click next
image

I installed it twice and had the same problem.

I just went to the bathroom, and after I came back, one is succeeded. Thank you very much!

@sadsfae

This comment has been minimized.

Owner

sadsfae commented Dec 7, 2018

I add a logstash-* pattern but cant click next
image
I installed it twice and had the same problem.

I just went to the bathroom, and after I came back, one is succeeded. Thank you very much!

Hey, cool! Sometimes it takes a while on lower-end systems or low cpu/memory for it all to instantiate. Are you sorted now?

Yeah, the logstash portions of the playbook need to create the logstash-* index (based on using rsyslog method of sending the ELK system logs itself to ELK to create them).

@sadsfae

This comment has been minimized.

Owner

sadsfae commented Dec 7, 2018

Closing this out now, re-open if you still have a problem.

@sadsfae sadsfae closed this Dec 7, 2018

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment