Questions tagged [kibana]

Kibana is a user friendly way to view, search and visualize your log data.

Filter by
Sorted by
Tagged with
0
votes
0answers
17 views

Cannot create index patterns in kibana after enabling x-pack security in elasticsearch

After I enabled x-pack security and updated kibana.yml appropriately, kibana sees only its own indices .kibana_1,.kibana_2,.kibana_task_manager, all other indices are unavailable in index pattern ...
0
votes
1answer
24 views

How to display the logs of a VM on ELK stack which is running on another VM?

-ELK is running on localhost & successfully getting logs. -Both VM's are on same server. -OS on both VM'S is Ubuntu 18-04 LTS.
0
votes
0answers
35 views

Correct reverse proxy to aws-es-proxy instance?

I installed a VPC with an Elasticsearch cluster with kibana on AWS. As that is VPC, it is not accessible publicly. Thus, to be able to access the kibana interface, I installed the https://github.com/...
0
votes
0answers
25 views

GKE elastic search not working with Kibana

I am trying to use my elastic cluster of GKE using my domain for that I am using GKE Elastic And I am using an external load balancer and then I am using ingress to map it with URL. I can access my ...
0
votes
0answers
14 views

elastalert custom alert rule for detecting more than 20 4xx req per min by Unique IP

Currently i installed elastalert for getting alert through kibana. But now i am stuck with it's rule and i have to set a custom rule which sent an alert when more than 20 4xx requests detected per min ...
0
votes
0answers
28 views

Kibana+nginx reverse_proxy issue

Greetings! I had to face issue with NginX reverse_proxy and Kibana. If I make Kibana index - nothing shows until I clear browser cache or visit page from Private Tab in browser. Here is my server.conf ...
0
votes
1answer
1k views

Kibana - “missing authentication credentials for REST request”

I have a elasticsearch cluster with xpack basic license, and native user authentication enabled (with ssl of course). I am attempting to set up kibana on a docker container but keep getting an error ...
0
votes
0answers
18 views

MFA for AWS Managed Kibana

I'm struggling to get TOTP MFA working with AWS managed Elasticsearch, for Kibana logins. My ES domain is public, uses fine-grained access control and Cognito. MFA for the user pool is set to '...
0
votes
0answers
26 views

Get a list of Kibana dashboards

I am trying to get a list of Kibana dashboards. Here is my command: curl -u 'elastic:xxxxx' -XGET --cacert /opt/ssl-certs/client-ca.cer -s https://x.x.x.x:9201/.kibana/_search?type=dashboard&...
0
votes
0answers
52 views

How to filter in kibana on input fields set in filebeat?

I've got filebeat setup sending logs to kibana. I have the apache module enabled which is sending the httpd error and access logs to kibana. I can filter on these by looking at the event.dataset field ...
0
votes
0answers
149 views

Monitoring tomcat logs (catalina.out) with Elastic stack and viewing in Kibana?

I've setup and installed Kibana and elastic search on my redhat vm. I then followed the fairly simple instructions to install filebeat with the apache module to gather the information on the apache ...
0
votes
0answers
13 views

filebeat feed is not received in kibana

I have migrated jira app from serverA to serverB. I have installed same version of filebeat on serverB as it was on serverA, configured the "filebeat.yml" just like it was on serverA, open the port in ...
0
votes
1answer
134 views

Can't access Kibana remotely - Can curl successfully on machine

I've installed Kibana on rhel and am I'm trying to access remotely on http://server-url:5601. I've installed elasticsearch and am able to access that remotely on http://server-url:9200 I've added ...
0
votes
0answers
9 views

Adding context paths to ELK log analytics?

I'm looking to install the ELK stack on my application server by following the instructions here: I can see you can then access the various ELK services on localhost via certain ports. Is there a way ...
0
votes
1answer
49 views

Grok filter is not working properly

I have Filebeat-7.1 installed in a Debian server, this Filebeat send data from files in this Debian server to server with Logstash 7.6 , here are the files config Filebeat.yml: #=====================...
0
votes
0answers
113 views

How to setup external access to my Azure VM running Kibana on port 5601?

I am currently running a Azure VM on which I have installed ElasticSearch, Kibana and Filebeat. The idea is to have a reporting/dashboarding capability for log files which are also stored on the same ...
0
votes
2answers
42 views

Kibana and Logstash: When is a field not a field?

I've enabled the grok filter in our logstash configuration in order to parse logs from HAProxy using the %{HAPROXYHTTP} and %{HAPROXYTCP} patterns. This seems to work great and viewing the details for ...
0
votes
0answers
43 views

Auto login for kibana visualizations not working, nginx

Hi im trying to use nginx to auto authenticate in kibana shared visualizations and it isnt working. Im on a centos 8, installed nginx, installed httpd-tools ,I create a folder called: sites-available,...
0
votes
1answer
135 views

Integrating nginx logs and elasticsearch app-search

I'm trying to setup a self-managed docker appsearch instance, together with kibana and elasticsearch, queried by a uvicorn python app, proxied by a nginx webserver My current issue is that the ...
0
votes
0answers
61 views

What do the various “fit” algorithms mean in Kibana?

In Timelion visualisations in Kibana there is the option to interpolate/upsample an infrequent measurement, i.e. "invent" samples in the empty timestamps between known values to fill out a line plot. ...
0
votes
1answer
228 views

AWS ElasticSearch service does not provide Kibana users management

First I'm going to explain my current architecture. I have an EC2 instance running with a Logstash daemon, as input an http configuration and as output my AWS ElasticSearch instance. As I said before,...
0
votes
0answers
454 views

fluentd correct mapping and indexing of @timestamp

The timestamp in Kibana is a long field (containing a unix timestamp) with the following configuration: <source> @type tail path /logs/other_vhosts_access.log pos_file /logs/access.log....
2
votes
0answers
47 views

Error while enrolling: empty access_token

I have successfully installed a full ELK Docker stack including Filebeat. When I want to enroll a Filebeat instance, I get the following error: Error while enrolling: empty access_token According to ...
0
votes
0answers
56 views

APM PHP Agent Setup

Im having a really hard time setting up my APM PHP Agent on a test EC2 server, can anyone please show me how to configure it properly to send log data to my ELK Server. I tried asking this question on ...
0
votes
1answer
151 views

logstash and rsyslog sends wrong hostname

I'm setting up a centralised logging system, comprising two VM's. Logger, which acts as the central syslog collector (using rsyslog) and Logstash processor; and Searcher, which acts as the ...
0
votes
1answer
192 views

Handling an Nginx 302 redirect internally, the redirect should go through proxy pass

I have an Nginx configuration that serves an AWS Kibana endpoint. server { listen 0.0.0.0:80; location / { proxy_pass http://<vpc-elasticsearch-endpoint>/_plugin/kibana/; } } ...
0
votes
1answer
187 views

Elasticsearch and Kibana 7 on same host, Kibana service won't run

I am trying to install elasticsearch and kibana on a single Ubuntu 18 vm per the docs. Elasticsearch Installation and Kibana Installation NOTE: - I set the ES_HEAP_SIZE env var to half the memory of ...
0
votes
1answer
20 views

The kibana old repo can't be installed even after removing the previously installed newer version in centos 7

I have installed the whole elk stack 7.0 in a centos 7.0 server. I followed the following guidelines to install the kibana https://www.elastic.co/guide/en/kibana/current/rpm.html But for a testing ...
1
vote
1answer
519 views

Enabling SSL on Kibana

RHEL7 Elastic Stack 6.7.1 Not using X-Pack. (following this guide) I'm having trouble configuring SSL on Kibana over 5601. First I generated a key and then I generated a CSR and sent it to the CA. ...
0
votes
1answer
706 views

Apache reverse proxy to localhost doesn't work

I want to use the open source ELK stack. Kibana has no security at all in the free version. My Idea is, that I put Kibana behind an Apache reverse proxy using Apache's basic authentication, but ...
1
vote
0answers
429 views

ElasticSearch not starting properly

On startup, our ElasticSearch server throws aJava exception I can see in the elasticsearch.log: [2019-02-27T15:51:59,908][WARN ][o.e.m.j.JvmGcMonitorService] [KibjtLy] [gc][young][263][19] duration [...
0
votes
1answer
335 views

Configure Kibana web page (only) to require a login

I have Elasticsearch 6.4.3 and Kibana 6.4.3 installed on Debian 8 Jessie. I've looked into X-Pack and Shield, which both seem to be mostly concerned with security within Elasticsearch, and how to ...
0
votes
1answer
603 views

Complete information into Postfix logs

I'm succesfully using Postfix on Debian to relay my internal e-mail and I am sending logs from the mail.log file to a Logstash instance, and I am showing them on a Kibana dashboards to look for not ...
1
vote
3answers
6k views

nginx serve Elasticsearch and Kibana on the same host

Totally new to nginx, I need a conf file to make nginx act as a reverse proxy to serve request on the same host to elasticsearch and kibana with different url path. I mean, I want: localhost/es -> ...
0
votes
1answer
686 views

Nginx proxy: redirect to http://private-service/

I'm trying to configure a nginx reverse proxy. I'm using htpasswd but it's unrelated in my case. I want the following: when visit https://public-nginx/kibana I want that it redirects to the proxied ...
2
votes
1answer
8k views

Filebeat can't connect to logstash on another server

Filebeat (11.11.11.11) can't connect to logstash (22.22.22.22) on another server (connection reset by peer). But filebeat services from other servers can do it. Also I can connect from this server(11....
0
votes
1answer
481 views

Error creating Kibana 6 pid file in /var/run/ directory

I have installed Kibana 6 in Centos 7.4 and I have configured pid file location to /var/run/mypidfile.pid. I want to write in this location because when server is rebooted, I need that Kibana starts ...
0
votes
2answers
502 views

Logstash isn't send info to elasticsearch

I have a Kibana environemtent installed, but isn't working. When I try to configure kibana, kibana says: Couldn't find any Elasticsearch data When I list indexes of elasticseach http://localhost:...
1
vote
1answer
80 views

Local Logstash failing to forward /var/log/syslog to central Logstash

I want my local instance of Logstash to forward syslog and all /var/log/* files to a remote, central instance of Logstash. The pipeline in /etc/logstash/conf/logstash-local.conf looks as follows: ...
3
votes
1answer
2k views

Why is this exclude_lines in filebeat excluding all logs?

I'm using ELK Stack, and I've got it working pretty well for most of my servers. The exception is that I have a gitlab server that has a ping to/from a gitlab-ci server that happens in the gitlab-...
2
votes
1answer
174 views

ELK logstash and core grok patterns

I'm evaluating the ELK stack with filebeat & logstash across a diverse range of applications/ servers. I understand the power of customising my own grok patterns for each application/log, but to ...
2
votes
1answer
122 views

Ansible task to start server not completing

I'm using ansible to setup my ubuntu machine with an ELK server, however I need to install an older version of kibana (5.2.2). Originally I tried using the apt module and the tried something like - ...
0
votes
2answers
692 views

Expose a specific Kibana dasboard behind a static URL through Apache/Nginx proxy

We have a Kibana 5.5.2 installation on Centos 7 with many dashboards configured, all works great connecting to IP:5601. A customer asked us to let his own dashboard be reachable under a specific ...
0
votes
1answer
819 views

Info sent from Logstash via elastic output not showing in Kibana, but file output works fine - what am I doing wrong?

I have an "ELK stack" configuration and, at first, was doing the standard 'filebeat' syslog feeding from logstash with the elasticsearch output plugin. It worked just fine. Now I have added a TCP ...
0
votes
1answer
360 views

Accessing remote kibana/ES from client : time out

I am trying to access kibana/elastic search on a VPS from my computer. On the VPS if I curl -XGET 'http://SERVERIP:9200' I get a good answer from ES, and same with Kibana. On my computer, if I use ...
0
votes
1answer
7k views

Auto delete elasticsearch data older than 30 days

I have setup a ELK stack to collect logs at central server. It is working perfectly. But by default it is holding elasticsearch index/data permanently. We just want to maintain the data for 30Days. ...
0
votes
2answers
847 views

haproxy redirect doesn't work for kibana

My haproxy config looks like and redirect to 5601 for kibana doesn't work. Why? ########################################################################## defaults mode http log ...
1
vote
3answers
6k views

Date field is being presented as integer

I have an Elastic Stack server (on Hyper-v) that is ingesting data via a logstash exec command and performing analytics on it. Everything is working great except a date field that is being displayed ...
0
votes
2answers
1k views

Troubleshooting rsyslog integration with ELK stack

I'm trying to configure rsyslog to send logs to logstash on CentOS. So I was following the tutorial. However, after setting up, nothing happens. Everything started ok, not error occurred but no logs ...
0
votes
1answer
502 views

How filter already collected info in elasticsearch5.2 on Ubuntu 16.04

Good Evening. I have a ELK stack as follows: Clients with logbeat (windows 2003, 2008 2012, and Linux Ubuntu 16.04) logstash (FreeBSD 11.0) elasticsearch5.2/kibana/nginx 10(Ubuntu 16.04) The problem ...