Questions tagged [kibana]
Kibana is a user friendly way to view, search and visualize your log data.
97
questions
0
votes
1
answer
171
views
Could not contact DNS servers (fluent bit)
I am configuring the fluent bit connection with elasticsearch, I have 3 elasticsearch nodes and I want to have high availability, according to the following documentation it is done like this text, ...
0
votes
0
answers
307
views
Running Opensearch behind a proxy
when I configure nginx to redirect /monitor to opensearch, opensearch receives the requests and redirects the user to /app/something which is not under /monitor and thus fails (error 404).
My nginx ...
0
votes
0
answers
294
views
Could not communicate to Elasticsearch, resetting connection and trying again. EOFError (EOFError)[Fluentd using helm on kubernetes]
I'm installing elasticsearch, kibana and fluentd in kubernetes with helm chart Elasticsearch and kibana pods stand up smoothly, but fluentd pods don't stand up I get the following errors:
2023-06-13 ...
0
votes
0
answers
120
views
GKE ingress returns 502 with encrypted service
I'm on GCP and I've deployed ElasticSearch and Kibana into a cluster, using the ElasticSearch operator. I've created an external Ingress with a preshared certificate, to send traffic into the Kibana ...
0
votes
0
answers
83
views
Logstash cloudwatch plugin behavior
We have an ELK stack set up on an ec2 instance that stopped working a month ago and I just got it working again (the problem was credentials with the cloudwatch logstash plugin).
What is strange is ...
0
votes
0
answers
142
views
AWS centralized logging with single index for all log groups
I am setting up logging on AWS, based on official AWS Centralized logging (source). Cloudwatch log groups are added with command like:
aws logs put-subscription-filter --destination-arn DEST --log-...
0
votes
1
answer
6k
views
Elasticsearch: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors (ca.crt matches on all nodes)
Note that this entire cluster was working fine up 'til I updated certificates. I'm on Elasticsearch 7.5.
I updated my certificates using the certificate-util - created a server.yml with all my servers ...
0
votes
1
answer
261
views
Restricting Kibana to TLSv1.2
What is the setting that needs to be set in the kibana.yml file (or other file) to restrict Kibana to TLSv1.2 over HTTP?
I believe that it uses TLSv1.0, TLSv1.1, and TLSv1.2 by default. I need to ...
1
vote
0
answers
321
views
On Debian system, keepalived is consuming full cpu usage on both kibana nodes
I have master/slave kibana machines on Debian 10. From few days, cpu usage of keepalived daemon on both nodes are reaching to 100%. After keepalived restart it goes to normal, and this loops forever.
...
1
vote
0
answers
1k
views
My elastic search is not showing any data using elastic-agent
Surprisingly my elastic version 7.15 with basic license have installed the fleet server and then configured windows-policy with elastic-endpoint and windows integration. Have enabled all the rules; ...
1
vote
1
answer
790
views
Kibana does not trust Let's Encrypt CA in Kubernetes Helm Setup
I have a k8s cluster configured with calico as networking system. I'm running slightly customized versions of helm elastic/elasticsearch and elastic/kibana with security enabled. For security, I use ...
0
votes
1
answer
10k
views
Kibana cannot be accessed through port 5601 in browser [duplicate]
I cannot get to kibana through web UI. I'm set the necessary ports in firewall-cmd, I've configured kibana.yml and elasticsearch.yml. I'm not seeing any relevant errors, or at least don't know if they ...
0
votes
1
answer
335
views
Add subdomain for kibana with nginx
I'm trying to include a subdomain kibana.domain.com however the proxy setup isn't working. The domain without the subdomain works, and all the redirects for no-www and ssl work for the base domain. ...
0
votes
1
answer
127
views
How to display the logs of a VM on ELK stack which is running on another VM?
-ELK is running on localhost & successfully getting logs.
-Both VM's are on same server.
-OS on both VM'S is Ubuntu 18-04 LTS.
1
vote
0
answers
333
views
Correct reverse proxy to aws-es-proxy instance?
I installed a VPC with an Elasticsearch cluster with kibana on AWS.
As that is VPC, it is not accessible publicly.
Thus, to be able to access the kibana interface, I installed the https://github.com/...
0
votes
0
answers
156
views
Kibana+nginx reverse_proxy issue
Greetings!
I had to face issue with NginX reverse_proxy and Kibana. If I make Kibana index - nothing shows until I clear browser cache or visit page from Private Tab in browser. Here is my server.conf ...
0
votes
1
answer
11k
views
Kibana - "missing authentication credentials for REST request"
I have a elasticsearch cluster with xpack basic license, and native user authentication enabled (with ssl of course). I am attempting to set up kibana on a docker container but keep getting an error ...
0
votes
1
answer
2k
views
Can't access Kibana remotely - Can curl successfully on machine
I've installed Kibana on rhel and am I'm trying to access remotely on http://server-url:5601.
I've installed elasticsearch and am able to access that remotely on http://server-url:9200
I've added
...
0
votes
0
answers
17
views
Adding context paths to ELK log analytics?
I'm looking to install the ELK stack on my application server by following the instructions here:
I can see you can then access the various ELK services on localhost via certain ports. Is there a way ...
0
votes
1
answer
911
views
Grok filter is not working properly
I have Filebeat-7.1 installed in a Debian server, this Filebeat send data from files in this Debian server to server with Logstash 7.6 , here are the files config
Filebeat.yml:
#=====================...
1
vote
1
answer
375
views
How to setup external access to my Azure VM running Kibana on port 5601?
I am currently running a Azure VM on which I have installed ElasticSearch, Kibana and Filebeat. The idea is to have a reporting/dashboarding capability for log files which are also stored on the same ...
0
votes
2
answers
452
views
Kibana and Logstash: When is a field not a field?
I've enabled the grok filter in our logstash configuration in order to parse logs from HAProxy using the %{HAPROXYHTTP} and %{HAPROXYTCP} patterns. This seems to work great and viewing the details for ...
0
votes
1
answer
250
views
Integrating nginx logs and elasticsearch app-search
I'm trying to setup a self-managed docker appsearch instance, together with kibana and elasticsearch, queried by a uvicorn python app, proxied by a nginx webserver
My current issue is that the ...
0
votes
1
answer
610
views
AWS ElasticSearch service does not provide Kibana users management
First I'm going to explain my current architecture. I have an EC2 instance running with a Logstash daemon, as input an http configuration and as output my AWS ElasticSearch instance.
As I said before,...
2
votes
0
answers
69
views
Error while enrolling: empty access_token
I have successfully installed a full ELK Docker stack including Filebeat.
When I want to enroll a Filebeat instance, I get the following error:
Error while enrolling: empty access_token
According to ...
0
votes
1
answer
513
views
logstash and rsyslog sends wrong hostname
I'm setting up a centralised logging system, comprising two VM's.
Logger, which acts as the central syslog collector (using rsyslog) and Logstash processor; and
Searcher, which acts as the ...
0
votes
1
answer
547
views
Handling an Nginx 302 redirect internally, the redirect should go through proxy pass
I have an Nginx configuration that serves an AWS Kibana endpoint.
server {
listen 0.0.0.0:80;
location / {
proxy_pass http://<vpc-elasticsearch-endpoint>/_plugin/kibana/;
}
}
...
0
votes
1
answer
415
views
Elasticsearch and Kibana 7 on same host, Kibana service won't run
I am trying to install elasticsearch and kibana on a single Ubuntu 18 vm per the docs. Elasticsearch Installation and Kibana Installation
NOTE:
- I set the ES_HEAP_SIZE env var to half the memory of ...
0
votes
1
answer
48
views
The kibana old repo can't be installed even after removing the previously installed newer version in centos 7
I have installed the whole elk stack 7.0 in a centos 7.0 server. I followed the following guidelines to install the kibana
https://www.elastic.co/guide/en/kibana/current/rpm.html
But for a testing ...
1
vote
1
answer
1k
views
Enabling SSL on Kibana
RHEL7
Elastic Stack 6.7.1
Not using X-Pack.
(following this guide)
I'm having trouble configuring SSL on Kibana over 5601. First I generated a key and then I generated a CSR and sent it to the CA. ...
1
vote
1
answer
3k
views
Apache reverse proxy to localhost doesn't work
I want to use the open source ELK stack. Kibana has no security at all in the free version. My Idea is, that I put Kibana behind an Apache reverse proxy using Apache's basic authentication, but ...
1
vote
0
answers
977
views
ElasticSearch not starting properly
On startup, our ElasticSearch server throws aJava exception I can see in the elasticsearch.log:
[2019-02-27T15:51:59,908][WARN ][o.e.m.j.JvmGcMonitorService] [KibjtLy] [gc][young][263][19] duration [...
0
votes
1
answer
421
views
Configure Kibana web page (only) to require a login
I have Elasticsearch 6.4.3 and Kibana 6.4.3 installed on Debian 8 Jessie.
I've looked into X-Pack and Shield, which both seem to be mostly concerned with security within Elasticsearch, and how to ...
0
votes
1
answer
1k
views
Complete information into Postfix logs
I'm succesfully using Postfix on Debian to relay my internal e-mail and I am sending logs from the mail.log file to a Logstash instance, and I am showing them on a Kibana dashboards to look for not ...
1
vote
3
answers
8k
views
nginx serve Elasticsearch and Kibana on the same host
Totally new to nginx, I need a conf file to make nginx act as a reverse proxy to serve request on the same host to elasticsearch and kibana with different url path.
I mean, I want:
localhost/es -> ...
0
votes
1
answer
910
views
Nginx proxy: redirect to http://private-service/
I'm trying to configure a nginx reverse proxy. I'm using htpasswd but it's unrelated in my case.
I want the following:
when visit https://public-nginx/kibana I want that it redirects to the proxied ...
2
votes
1
answer
14k
views
Filebeat can't connect to logstash on another server
Filebeat (11.11.11.11) can't connect to logstash (22.22.22.22) on another server (connection reset by peer). But filebeat services from other servers can do it.
Also I can connect from this server(11....
0
votes
1
answer
821
views
Error creating Kibana 6 pid file in /var/run/ directory
I have installed Kibana 6 in Centos 7.4 and I have configured pid file location to /var/run/mypidfile.pid. I want to write in this location because when server is rebooted, I need that Kibana starts ...
0
votes
2
answers
746
views
Logstash isn't send info to elasticsearch
I have a Kibana environemtent installed, but isn't working.
When I try to configure kibana, kibana says:
Couldn't find any Elasticsearch data
When I list indexes of elasticseach http://localhost:...
1
vote
1
answer
165
views
Local Logstash failing to forward /var/log/syslog to central Logstash
I want my local instance of Logstash to forward syslog and all /var/log/* files to a remote, central instance of Logstash.
The pipeline in /etc/logstash/conf/logstash-local.conf looks as follows:
...
3
votes
1
answer
3k
views
Why is this exclude_lines in filebeat excluding all logs?
I'm using ELK Stack, and I've got it working pretty well for most of my servers. The exception is that I have a gitlab server that has a ping to/from a gitlab-ci server that happens in the gitlab-...
2
votes
1
answer
272
views
ELK logstash and core grok patterns
I'm evaluating the ELK stack with filebeat & logstash across a diverse range of applications/ servers.
I understand the power of customising my own grok patterns for each application/log, but to ...
2
votes
1
answer
297
views
Ansible task to start server not completing
I'm using ansible to setup my ubuntu machine with an ELK server, however I need to install an older version of kibana (5.2.2).
Originally I tried using the apt module and the tried something like - ...
0
votes
2
answers
988
views
Expose a specific Kibana dasboard behind a static URL through Apache/Nginx proxy
We have a Kibana 5.5.2 installation on Centos 7 with many dashboards configured, all works great connecting to IP:5601.
A customer asked us to let his own dashboard be reachable under a specific ...
0
votes
1
answer
1k
views
Info sent from Logstash via elastic output not showing in Kibana, but file output works fine - what am I doing wrong?
I have an "ELK stack" configuration and, at first, was doing the standard 'filebeat' syslog feeding from logstash with the elasticsearch output plugin. It worked just fine.
Now I have added a TCP ...
0
votes
1
answer
508
views
Accessing remote kibana/ES from client : time out
I am trying to access kibana/elastic search on a VPS from my computer.
On the VPS if I
curl -XGET 'http://SERVERIP:9200'
I get a good answer from ES, and same with Kibana.
On my computer, if I use ...
1
vote
1
answer
15k
views
Auto delete elasticsearch data older than 30 days
I have setup a ELK stack to collect logs at central server. It is working perfectly. But by default it is holding elasticsearch index/data permanently. We just want to maintain the data for 30Days. ...
0
votes
2
answers
1k
views
haproxy redirect doesn't work for kibana
My haproxy config looks like and redirect to 5601 for kibana doesn't work.
Why?
##########################################################################
defaults
mode http
log ...
1
vote
3
answers
9k
views
Date field is being presented as integer
I have an Elastic Stack server (on Hyper-v) that is ingesting data via a logstash exec command and performing analytics on it. Everything is working great except a date field that is being displayed ...
0
votes
2
answers
2k
views
Troubleshooting rsyslog integration with ELK stack
I'm trying to configure rsyslog to send logs to logstash on CentOS. So I was following the tutorial.
However, after setting up, nothing happens. Everything started ok, not error occurred but no logs ...