No results found in KIbana with ElasticSearch -


i have set index in elasticsearch, included mapping have data. when make request, can check contents follows:

{   "took": 5,   "timed_out": false,   "_shards": {     "total": 5,     "successful": 5,     "failed": 0   },   "hits": {     "total": 9,     "max_score": 1,     "hits": [       {         "_index": "flights",         "_type": "yatra",         "_id": "au5tq5qxevkx_fdbbqf9",         "_score": 1,         "_source": {           "go_duration": 13.5,           "return_arrival_time": "2015-09-26 09:55:00",           "go_arrival_city": " nrt ",           "return_departure_city": "nrt",           "cost": 44594,           "return_duration": 11.5,           "_timestamp": "2015-07-08t19:43:42.254412",           "return_departure_time": "2015-09-25 18:40:00",           "return_arrival_city": " pnq ",           "go_departure_time": "2015-09-16 20:00:00",           "go_arrival_time": "2015-09-17 13:20:00",           "airline": "jet airways",           "go_departure_city": "pnq"         }       },       {         "_index": "flights",         "_type": "yatra",         "_id": "au5trpjuevkx_fdbbqgf",         "_score": 1,         "_source": {           "go_duration": 13.5,           "return_arrival_time": "2015-09-26 09:55:00",           "go_arrival_city": " nrt ",           "return_departure_city": "nrt",           "cost": 44594,           "return_duration": 11.5,           "_timestamp": "2015-07-08t19:45:11.917928",           "return_departure_time": "2015-09-25 18:40:00",           "return_arrival_city": " pnq ",           "go_departure_time": "2015-09-16 20:00:00",           "go_arrival_time": "2015-09-17 13:20:00",           "airline": "jet airways",           "go_departure_city": "pnq"         }       }     ]   } } 

now, have configured kibana use elasticsearch. following snapshot kibana. kibana settings tab

i created "_timestamp" field in settings->advanced->metafields. created new index "_timestamp" field , " index contains time-based events" field checked . have set timestamp "last 60 days". still cannot see data. missing?

i had faced same issue. creating new field timsestamp didn't help.

so, approach issue -

1.> looked @ server status, if running or not.

for me server , running

2.> looked @ previous day records find out when did kibana go down.

so saw, after latest deployment on production environment, kibana didnt logs

3.> since server fine, making new index didnt help. so, thought problem might elasticsearch. elasticsearch indexes logs gets logstash.

so went salt master , firstly, checked whether services running or not. running. next stopped logstash , elastic search , killed or java processes. , after further investigating indexes saw indexes corrupted. restarting services again worked , went well.

why did happen ?

this happened because or had caused abrupt stopping , restarting of instance.


Comments

Popular posts from this blog

toolbar - How to add link to user registration inside toobar in admin joomla 3 custom component -

linux - disk space limitation when creating war file -