Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [kibana]

Kibana is a user friendly way to view, search and visualize your log data.

Kibana is an open source (MIT License), browser based interface to ElasticSearch.

94 questions
8
votes
1 answer

ELK Stack (Logstash, Elasticsearch and Kibana) with concurrent remote syslog server?

I'm building a log analyser service to start monitoring mainly our pfSense Firewalls, XenServer Hypervisors, FreeBSD/Linux servers and Windows servers. There's a lot of documentation on the internet about the ELK stack and how to make it work…
Vinícius Ferrão
  • 5,400
  • 10
  • 52
  • 91
7
votes
4 answers

Error Could not contact Elasticsearch at http://localhost:9200. - kibana dashboard

'Error Could not contact Elasticsearch at http://localhost:9200. Please ensure that Elasticsearch is reachable from your system.' Currently I am following http://packetbeat.com/getstarted I installed elastic search - running on localhost:9200 -…
druuu
  • 171
  • 1
  • 1
  • 2
5
votes
2 answers

"Index Patterns: Please specify a default index pattern" in Kibana

I'm trying to create a simple hello world for ELK and be able to see kibana reports via the internet. I've installed kibana, logstash, nginx and elastic search. Here's my /etc/logstash/conf.d/10-syslog.conf: input { file { path => […
Dett
  • 53
  • 1
  • 4
5
votes
3 answers

Kibana4 + nginx reverse proxy using location /kibana4/ = Not Found 404

I'm trying to setup Kibana4 with nginx reverse proxy, with partial success so far. Here is my config related to Kibana: server { listen 82; server_name ${HOSTNAME}; set $kibana kibana.docker; location /kibana4/ { proxy_pass …
Szymon Stepniak
  • 171
  • 1
  • 5
4
votes
1 answer

Logstash, Kibana and email alerts

I am trying to setup email alerts using logstash. Right now it emails me EVERY time the pattern "Error" is parsed into my log file which can lead to a lot of unnecessary emails. I'd like to create a conditional rule so that let's say "X logfile has…
Gabriel
  • 141
  • 1
  • 1
  • 2
4
votes
4 answers

Nothing appearing in kibana dashboard

I have installed Logstash ElasticSearch Kibana on an EC2 instance. I can visit http://example.com:9200 Here I get { "status" : 200, "name" : "Aleta Ogord", "version" : { "number" : "1.1.0", "build_hash" :…
user2099762
  • 133
  • 2
  • 4
  • 18
4
votes
3 answers

Foward slash in kibana 3 query

I'm trying to add a query that will match a request that ends with a slash, like this one: n.n.n.n - - [16/Oct/2013:16:40:41 +0100] "GET / HTTP/1.1" 200 25058 "-" "Mozilla/5.0 (iPad; CPU OS 7_0_2 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like…
G Mawr
  • 173
  • 1
  • 3
  • 6
3
votes
1 answer

Why is this exclude_lines in filebeat excluding all logs?

I'm using ELK Stack, and I've got it working pretty well for most of my servers. The exception is that I have a gitlab server that has a ping to/from a gitlab-ci server that happens in the gitlab-access log. This happens every second, and I'd like…
trueCamelType
  • 1,016
  • 5
  • 19
  • 41
3
votes
1 answer

elk stack error "unable to fetch mapping do you have indices matching the pattern"

i am trying to setup ELK stack with collectd on Ubuntu 16.04 LTS (so pretty much latest version of stack available) kibana is behind nginx proxy (followed this guide…
uberrebu
  • 493
  • 5
  • 15
  • 32
3
votes
3 answers

kibana: no indices error

None of the existing answers helped, so here a new question. Usecase: Redirecting syslog (or) monitoring static file. I have successfully installed logstash (1.4.2), elasticsearch(1.1.1) and kibana(3.0.1) but struggling to get rid of error No…
user3247463
  • 31
  • 1
  • 3
2
votes
0 answers

Error while enrolling: empty access_token

I have successfully installed a full ELK Docker stack including Filebeat. When I want to enroll a Filebeat instance, I get the following error: Error while enrolling: empty access_token According to the source, the error can be anything, if the…
Daniel W.
  • 1,439
  • 4
  • 23
  • 46
2
votes
1 answer

Filebeat can't connect to logstash on another server

Filebeat (11.11.11.11) can't connect to logstash (22.22.22.22) on another server (connection reset by peer). But filebeat services from other servers can do it. Also I can connect from this server(11.11.11.11) using telnet to this port (telnet…
Dmitry
  • 179
  • 1
  • 2
  • 8
2
votes
1 answer

ELK logstash and core grok patterns

I'm evaluating the ELK stack with filebeat & logstash across a diverse range of applications/ servers. I understand the power of customising my own grok patterns for each application/log, but to get running initially it seems very inefficient to…
Dan Poltawski
  • 141
  • 1
  • 3
2
votes
1 answer

Ansible task to start server not completing

I'm using ansible to setup my ubuntu machine with an ELK server, however I need to install an older version of kibana (5.2.2). Originally I tried using the apt module and the tried something like - apt: name=kibana=5.2.2 state=present force=yes but…
Ryan Grush
  • 181
  • 9
2
votes
2 answers

Kibana 4, Logstash dashboard: how do I require Nginx authentication when saving but allow anonymous views?

I would like to require auth_basic nginx authentication to save all kibana 4 dashboards but allow anyone to view dashboards without authentication. I recently installed an ELK (Elasticsearch 1.4.5, Logstash 1:1.5.2-1, and Kibana 4.1.1) stack on…
Peter M
  • 953
  • 2
  • 14
  • 27
1
2 3 4 5 6 7