[英]Is “logstash-” a mandatory prefix of indices in kibana?
If I put messages on index "[logstash-example-]YYYY.MM.DD" then kibana can show the log message in charts but if it's on "[example-]YYYY.MM.DD" then it won't find it. 如果我将消息放在索引“ [logstash-example-] YYYY.MM.DD”上,则kibana可以在图表中显示日志消息,但是如果消息在“ [example-] YYYY.MM.DD”上,则找不到消息。 (curl query gives back the correct result in latter case)
(在后一种情况下,curl查询会返回正确的结果)
According to documentation it should work: "For example [web-]YYYY.MM.DD,[mail-]YYYY.MM.DD Please also note that indices should rollover at midnight UTC." 根据文档,它应该起作用:“例如[web-] YYYY.MM.DD,[mail-] YYYY.MM.DD请注意,索引应在UTC午夜翻转。”
(Elasticsearch 1.3.4, Kibana 3.1.0) (Elasticsearch 1.3.4,Kibana 3.1.0)
You have to modify your kibana dashboard setting 您必须修改kibana仪表板设置
Configure dashboarad
in Kibana on Right Top. Configure dashboarad
。 Index
tab. Index
标签。 Index pattern
to your new index pattern. Index pattern
修改为新的索引模式。 For example: [example-]YYYY.MM.DD Hope this can help you. 希望这可以帮到你。
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.