Questions tagged [elk]

Questions about the ELK stack, which gives you the ability to aggregate logs from all your systems and applications, analyze these logs and create visualization.

ELK is a stack of the three open source projects - , and

The ELK stack gives you the ability to aggregate logs from all your systems and applications, analyze these logs and create visualization.

Useful links:

1095 questions
0
votes
1 answer

indices are not loading after migration

i am working on a ELK migration project where i have to migrate some kibana reports from one environment to another. following are the imporant facts of the current scenario 1.source instance has few reports and dashboards already running…
seetharaman
  • 27
  • 1
  • 6
0
votes
2 answers

Filter query URI in elasticsearch based on dates

Not able to filter the elasticsearch data based on dates. Not able to correctly figure out how to use "gt", "gte" in the URI to fetch Elasticsearch data. localhost:9200/index/date:{"gte":2019-01-01 00:00:00} Need to fetch all the docs that have…
Anshuman
  • 39
  • 1
  • 5
0
votes
1 answer

Delta (Difference) of Count of each day from previous day

I'm new to ELK Stack. I'm working on a Kibana dashboard to find the delta(difference) of count of each day from previous day. So, that we can know how much increase was there in the sales of each day comapared to previous day For reference : Present…
0
votes
1 answer

Elasticsearch not returns all fields for each hit row

I have a problem with my Elasticsearch index. I'm trying to get some fields for each row, but elastic returns not all of them when I'm searching. If I try to 'get' document by id - it returns all fields In my query I'm trying to use _source field,…
0
votes
1 answer

Host name incorrect for logstash monitoring in Kibana

I was able to configure logstash 6.7.1 to enable monitoring and it's successfully showing up in Kibana. However the host name is incorrect, it defaults to 127.0.0.1:9600 and 127.0.0.1:9601 for all 3 nodes in my cluster. Am I missing something?
Gokulraj
  • 450
  • 1
  • 3
  • 20
0
votes
1 answer

How to configure fluentbit to send error log only

I am using fluentbit to send kubernetes logs to ELK , i have set the level to error but still it sends all the log msgs to ELK , How can I configure fluentbit to send msgs that correspond to some error only.
Ijaz Ahmad
  • 11,198
  • 9
  • 53
  • 73
0
votes
0 answers

Indexing a document into elasticsearch with ndjson format

The question is also posted here, https://discuss.elastic.co/t/indexing-jupyter-notebooks/194639?u=venkateshreddypala
Venkateshreddy Pala
  • 873
  • 1
  • 6
  • 11
0
votes
1 answer

How can I get logType and level from Json ElasticSearch by using Nest?

I am trying to get value of loglevel and logType from below json logs of ElasticSearch by using Nest Code. LogLevel should be "ERROR" LogType should be "Response". How can I write this Nest query. I think that Nest is Really difficult. var…
Penguen
  • 16,836
  • 42
  • 130
  • 205
0
votes
1 answer

Kibana shows only 1 servers logs among 2 servers sent via Logstash

I have 2 servers with filebeat installed on it and on another server I have ELK stack installed. On ELK server under Logstash conf directory, I have created 2 files representing 2 servers On both servers In filebeat configuration file, I have…
Devendra
  • 185
  • 14
0
votes
1 answer

How to inject file.log to logstash and display it via kibana

I using docker container and docker-compose, to create ELK containers, after the containers created i should inject file into logstash and display it via docker I'm havent work on docker until three days ago, i working at this problem, surfed at…
B. Kristina
  • 53
  • 1
  • 7
0
votes
1 answer

Filebeat nginx determine application name via context root

I currently have filebeat reading nginx logs and pushing them to a logstash, I am trying to determine which application the log is coming from by looking at the URI context root (not sure if this is the correct way to do it), but the issue is when…
Justin
  • 866
  • 1
  • 13
  • 29
0
votes
1 answer

update elastic-search document with the same ID

everyone. I'm new in elk and I have a question about logstash. I have some services and each one has 4 or 6 logs; it means a doc in elastic may has 4 or 6 logs. I want to read these logs and if they have the same id, put them in one elastic doc. I…
Amir Ameri
  • 11
  • 3
0
votes
1 answer

Integration of hadoop (specifically HDFS files) with ELK stack

I am trying to integrate hadoop with ELK stack. My use case is " i have to get a data from a file present in HDFS path and show the contents on kibana dashboard" Hive is not working there so I can't use hive. Are there any other ways to do…
0
votes
1 answer

Unable to send spring boot microservice logs to ELK stack

I ran the following commands to setup ELK stack on my local machine : docker run -e "discovery.type=single-node" -d -it --name es -p 9200:9200 -p 9300:9300 elasticsearch:7.2.0 docker run -d -it --name kibana --link es:elasticsearch -p 5601:5601…
user1188867
  • 3,726
  • 5
  • 43
  • 69
0
votes
1 answer

How to enter data from csv to elasticsearch using logstash?

I am trying to insert data into elasticsearch using logstash but getting stuck. My config file: logstashCrime.conf input { file { path => "C:\elk\sampl.csv" start_position => "beginning" sincedb_path => "nul" …
Karan Gupta
  • 529
  • 2
  • 7
  • 21