CODEWITHSUNDEEP
elasticsearchlogstashkibanalogstash-grokelastic-stack
Soundarya Thiagarajan
Soundarya Thiagarajan

Reputation: 574

Data not loading in kibana

I have started ElasticSearch, Logstash (3 conf files - input file, filter file and output file) and kibana server.

The input file : 

input {
  file {
    path => "/home/zakir/Downloads/access.log"
    start_position => "beginning"
  }
}

The filter file is:

filter {
  if [path] =~ "access" {
    mutate { replace => { "type" => "apache_access" } }
    grok {
      match => { "message" => "%{COMBINEDAPACHELOG}" }
    }
  }
  date {
    match => [ "timestamp" , "dd/MMM/yyyy:HH:mm:ss Z" ]
  }
}

Output file is : 

output {
  elasticsearch {
    hosts => ["localhost:9200"]
  }
  stdout { codec => rubydebug }
}

Run Logstash : sudo service logstash restart

the data is not loading in kibana .. I was getting data sometime ago - suddenly i am not able to view the data in kibana..

can anyone help me to figure out this issue

Upvotes: 0

Views: 818

Answers (1)

Evaldas Buinauskas
Evaldas Buinauskas

Reputation: 14077

Apparently, this wasn't even a problem. Soundarya Thiagarajan wasn't aware of default Kibana time range (last 15 minutes).

Changing index time span to a wider range fixed issue:

enter image description here

Upvotes: 2

Related Questions