Questions tagged [kibana]
Kibana is a user friendly way to view, search and visualize your log data.
76
questions
0
votes
0answers
15 views
logstash not proccessing filebeat data
I have configured elk stack on a aws server and also configured filebeat on two different aws server with same config.
Telnet from both filebeat server to elk server on port 5044 working fine but ...
0
votes
1answer
32 views
logstash and rsyslog sends wrong hostname
I'm setting up a centralised logging system, comprising two VM's.
Logger, which acts as the central syslog collector (using rsyslog) and Logstash processor; and
Searcher, which acts as the ...
0
votes
1answer
41 views
Handling an Nginx 302 redirect internally, the redirect should go through proxy pass
I have an Nginx configuration that serves an AWS Kibana endpoint.
server {
listen 0.0.0.0:80;
location / {
proxy_pass http://<vpc-elasticsearch-endpoint>/_plugin/kibana/;
}
}
...
0
votes
0answers
43 views
Creating email alerts for kibana filters via sentil
I have a elk stack that works properly and can be monitored via the kibana dashboard. But as an improvement to the whole setup I have being researching for a reporting tool to setup with kibana. My ...
0
votes
0answers
17 views
Read-only Access to Kibana/ESAAS
Allowing "GET" Operations only via a group is breaking kibana access. When user accesses kibana with credentials; the "discover" page is not displayed. The page "Localhost:5601/app/kibana#/discover?_g"...
0
votes
1answer
27 views
Elasticsearch and Kibana 7 on same host, Kibana service won't run
I am trying to install elasticsearch and kibana on a single Ubuntu 18 vm per the docs. Elasticsearch Installation and Kibana Installation
NOTE:
- I set the ES_HEAP_SIZE env var to half the memory of ...
0
votes
1answer
18 views
The kibana old repo can't be installed even after removing the previously installed newer version in centos 7
I have installed the whole elk stack 7.0 in a centos 7.0 server. I followed the following guidelines to install the kibana
https://www.elastic.co/guide/en/kibana/current/rpm.html
But for a testing ...
1
vote
1answer
163 views
Enabling SSL on Kibana
RHEL7
Elastic Stack 6.7.1
Not using X-Pack.
(following this guide)
I'm having trouble configuring SSL on Kibana over 5601. First I generated a key and then I generated a CSR and sent it to the CA. ...
0
votes
1answer
128 views
Apache reverse proxy to localhost doesn't work
I want to use the open source ELK stack. Kibana has no security at all in the free version. My Idea is, that I put Kibana behind an Apache reverse proxy using Apache's basic authentication, but ...
1
vote
0answers
122 views
ElasticSearch not starting properly
On startup, our ElasticSearch server throws aJava exception I can see in the elasticsearch.log:
[2019-02-27T15:51:59,908][WARN ][o.e.m.j.JvmGcMonitorService] [KibjtLy] [gc][young][263][19] duration [...
0
votes
0answers
167 views
Kibana 6.5 behind a Haproxy : No response from kibana
First of all I'm pretty new to the Kibana world and Haproxy.
Installation : Centos 7
Haproxy 1.5.18 : installed through yum install haproxy.
Kibana : 6.5 latest release.
It's an 'In the box ...
0
votes
1answer
207 views
Configure Kibana web page (only) to require a login
I have Elasticsearch 6.4.3 and Kibana 6.4.3 installed on Debian 8 Jessie.
I've looked into X-Pack and Shield, which both seem to be mostly concerned with security within Elasticsearch, and how to ...
0
votes
1answer
444 views
Complete information into Postfix logs
I'm succesfully using Postfix on Debian to relay my internal e-mail and I am sending logs from the mail.log file to a Logstash instance, and I am showing them on a Kibana dashboards to look for not ...
0
votes
3answers
4k views
nginx serve Elasticsearch and Kibana on the same host
Totally new to nginx, I need a conf file to make nginx act as a reverse proxy to serve request on the same host to elasticsearch and kibana with different url path.
I mean, I want:
localhost/es -> ...
0
votes
1answer
433 views
Nginx proxy: redirect to http://private-service/
I'm trying to configure a nginx reverse proxy. I'm using htpasswd but it's unrelated in my case.
I want the following:
when visit https://public-nginx/kibana I want that it redirects to the proxied ...
1
vote
1answer
5k views
Filebeat can't connect to logstash on another server
Filebeat (11.11.11.11) can't connect to logstash (22.22.22.22) on another server (connection reset by peer). But filebeat services from other servers can do it.
Also I can connect from this server(11....
0
votes
1answer
257 views
Error creating Kibana 6 pid file in /var/run/ directory
I have installed Kibana 6 in Centos 7.4 and I have configured pid file location to /var/run/mypidfile.pid. I want to write in this location because when server is rebooted, I need that Kibana starts ...
0
votes
2answers
404 views
Logstash isn't send info to elasticsearch
I have a Kibana environemtent installed, but isn't working.
When I try to configure kibana, kibana says:
Couldn't find any Elasticsearch data
When I list indexes of elasticseach http://localhost:...
1
vote
1answer
56 views
Local Logstash failing to forward /var/log/syslog to central Logstash
I want my local instance of Logstash to forward syslog and all /var/log/* files to a remote, central instance of Logstash.
The pipeline in /etc/logstash/conf/logstash-local.conf looks as follows:
...
3
votes
1answer
1k views
Why is this exclude_lines in filebeat excluding all logs?
I'm using ELK Stack, and I've got it working pretty well for most of my servers. The exception is that I have a gitlab server that has a ping to/from a gitlab-ci server that happens in the gitlab-...
2
votes
1answer
158 views
ELK logstash and core grok patterns
I'm evaluating the ELK stack with filebeat & logstash across a diverse range of applications/ servers.
I understand the power of customising my own grok patterns for each application/log, but to ...
2
votes
1answer
82 views
Ansible task to start server not completing
I'm using ansible to setup my ubuntu machine with an ELK server, however I need to install an older version of kibana (5.2.2).
Originally I tried using the apt module and the tried something like - ...
0
votes
2answers
471 views
Expose a specific Kibana dasboard behind a static URL through Apache/Nginx proxy
We have a Kibana 5.5.2 installation on Centos 7 with many dashboards configured, all works great connecting to IP:5601.
A customer asked us to let his own dashboard be reachable under a specific ...
0
votes
1answer
669 views
Info sent from Logstash via elastic output not showing in Kibana, but file output works fine - what am I doing wrong?
I have an "ELK stack" configuration and, at first, was doing the standard 'filebeat' syslog feeding from logstash with the elasticsearch output plugin. It worked just fine.
Now I have added a TCP ...
0
votes
1answer
240 views
Accessing remote kibana/ES from client : time out
I am trying to access kibana/elastic search on a VPS from my computer.
On the VPS if I
curl -XGET 'http://SERVERIP:9200'
I get a good answer from ES, and same with Kibana.
On my computer, if I use ...
0
votes
1answer
3k views
Auto delete elasticsearch data older than 30 days
I have setup a ELK stack to collect logs at central server. It is working perfectly. But by default it is holding elasticsearch index/data permanently. We just want to maintain the data for 30Days. ...
0
votes
2answers
671 views
haproxy redirect doesn't work for kibana
My haproxy config looks like and redirect to 5601 for kibana doesn't work.
Why?
##########################################################################
defaults
mode http
log ...
1
vote
3answers
5k views
Date field is being presented as integer
I have an Elastic Stack server (on Hyper-v) that is ingesting data via a logstash exec command and performing analytics on it. Everything is working great except a date field that is being displayed ...
0
votes
2answers
987 views
Troubleshooting rsyslog integration with ELK stack
I'm trying to configure rsyslog to send logs to logstash on CentOS. So I was following the tutorial.
However, after setting up, nothing happens. Everything started ok, not error occurred but no logs ...
0
votes
1answer
444 views
How filter already collected info in elasticsearch5.2 on Ubuntu 16.04
Good Evening. I have a ELK stack as follows:
Clients with logbeat (windows 2003, 2008 2012, and Linux Ubuntu 16.04)
logstash (FreeBSD 11.0)
elasticsearch5.2/kibana/nginx 10(Ubuntu 16.04)
The problem ...
0
votes
1answer
144 views
Using `#` in nginx location regex?
I have the following two blocks in my nginx config for Kibana. My goal is to provide two levels of access, one to access the dashboard, visualization, and discover pages of Kibana (for developers) ...
1
vote
1answer
1k views
Nested objects from MySQL to ElasticSearch
I am new to ES and trying to load data from MYSQL to Elasticsearch using logstash jdbc.
In my situation I want to use column values as field names, Please see new & hex in output data, I want '...
1
vote
1answer
467 views
Using ELK X-pack for general purpose alerts and alarms
The X-pack package from Elastic is fully integrated with Elasticsearch and Kibana to provide (among other things) an alarm reporting platform.
I believe that the regular use case is to build that ...
1
vote
1answer
280 views
Field/value extraction with ELK
I have an industrial system producing log files where some of the lines look like this:
component1 v1 component2 v2 component3 v3 ...
Where vx is a numerical value (eg. 3.14159).
I'm running a ...
3
votes
1answer
11k views
elk stack error “unable to fetch mapping do you have indices matching the pattern”
i am trying to setup ELK stack with collectd on Ubuntu 16.04 LTS (so pretty much latest version of stack available)
kibana is behind nginx proxy (followed this guide https://www.digitalocean.com/...
5
votes
2answers
4k views
“Index Patterns: Please specify a default index pattern” in Kibana
I'm trying to create a simple hello world for ELK and be able to see kibana reports via the internet. I've installed kibana, logstash, nginx and elastic search. Here's my /etc/logstash/conf.d/10-...
1
vote
1answer
1k views
Logstash - splitting an event into two based on objects in an included array
I'm working with logstash for the first time, and I'm trying to take JSON reports from amavisd-new in for searching and analysis. Amavisd-new is able to write the json logging to redis, and I have ...
1
vote
0answers
182 views
Redis creates many events in logstash
I'm doing some testing for a POC with logstash. When using redis to buffer messages it appears they stay in redis and continually get added to elasticsearch as new events. For example, if I restart ...
-1
votes
1answer
618 views
NGINX forward not working
I have nginx installed on my Centos 7 box and would like to forward calls to my kibana installation on port 5601. Kibana is up and running and am able to browse to it by by appending the port to the ...
1
vote
2answers
519 views
Running a service as root in RHEL 6
I am trying to force Kibana to listen on port 80 therefore it needs to run as root. How can I do this? The init script is as follows:
#!/bin/sh
# Init script for kibana
# Maintained by
# Generated by ...
0
votes
0answers
2k views
F5 High Speed Logging and Logstash GROK
Im trying to format logs straight from our F5 using HSL and Logstash.
I've copied the example configuration exactly from the site as it contains the majority of the information I wanted logstash ...
1
vote
0answers
219 views
Visualize multiline ruby exceptions in kibana 4
I have setup the latest version of Kibana4 ElasticSearch stack. The logs are being pooled from remote app sources which are running on Ruby.
I want to search for Multi Line exceptions created by ...
0
votes
2answers
3k views
Kibana: No Living connections
I have ES 1.5.2 cluster with Kibana 4.0.1. This consists of 4 data/master nodes along with 4 client nodes.
When I'm trying to load kibana sometimes it takes longer time to load or sometimes I need to ...
1
vote
2answers
1k views
Nginx reverse proxy for elasticsearch - inserting filters
I've got an elasticsearch instance, with an Nginx reverse proxy sat in front of it, implementing a URL level access control mechanism - approximately as described in this article
This is giving me ...
0
votes
2answers
913 views
Logstash filtering syslog by host group?
I've got an Elasticsearch/Logstash/Kibana instance running, which I'm merrily stuffing with syslogs from a variety of hosts.
Having built it to scale - with multiple logstash syslogd listeners, and ...
8
votes
1answer
1k views
ELK Stack (Logstash, Elasticsearch and Kibana) with concurrent remote syslog server?
I'm building a log analyser service to start monitoring mainly our pfSense Firewalls, XenServer Hypervisors, FreeBSD/Linux servers and Windows servers.
There's a lot of documentation on the internet ...
1
vote
1answer
426 views
ELK stack on google compute engine
Trying to set up an ELK stack on a google compute engine server I found out that the "click to deploy" solution google is providing is outdated.
None the less I tried installing Logstash and Kibana ...
google-compute-engine
0
votes
1answer
479 views
Kibana: Timestamp field looks different from the Table and JSON fields in the UI
From the combined screenshot can you tell why there is a difference in timestamp for a log entry in different views in Kibana UI.
Update:
My timezone is +5:30 GMT, but I need the logs to show up ...
1
vote
0answers
44 views
Experiences with logfile monitoring
In an IT-integrator, I'm currently trying to evangelize the use of log file monitoring of hardware installations. The idea is to use a Elasticsearch/Logstash/Kibana stack (most flexibility, open ...
0
votes
1answer
1k views
How to provision dashboards into kibana?
I am giving my developers the gift of kibana using the elasticsearch that is bundled with logstash. They will have kibana in their vagrant boxes.
Goal: Install and configure kibana dashboards via ...
