如何在kibana中创建filebeat索引模式? [英] How to create filebeat index pattern in kibana?

问题描述

我当前正在使用带有文件拍子的ELK堆栈.我能够将apache日志文件内容以json格式映射到Elasticsearch服务器.现在我想知道如何在kibana中为filebeat创建索引模式?跟随下面的链接，但没有帮助. https://www.elastic.co/guide/zh-CN/beats/filebeat/current/filebeat-index-pattern.html

I'm currently using ELK stack with filebeat. I'm able to map the apache log file contents to Elasticsearch server in json format. Now I would like to know how to create a index pattern for filebeat in kibana? Followed below link but that did not help. https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-index-pattern.html

推荐答案

如您链接的页面所述:要加载此模式，可以使用为导入仪表板提供的脚本."因此，在看到filebeat-*索引模式之前，应先运行./scripts/import_dashboards工具，然后刷新页面.这会将索引模式写入Kibana使用的.kibana索引中.

As stated on the page you linked, "To load this pattern, you can use the script that’s provided for importing dashboards." So before you will see the filebeat-* index pattern you should run the ./scripts/import_dashboards tool then refresh the page. This will write the index pattern into the .kibana index used by Kibana.

对于Linux，当通过rpm或deb安装时，命令为:

For Linux when installed by rpm or deb the command is:

/usr/share/filebeat/scripts/import_dashboards -es http://elasticsearch:9200

如果使用的是tar或zip软件包，则该命令位于软件包的scripts目录中.

If you are using the tar or zip package the command is located in the scripts directory of the package.

您可以通过转到Management-> Index Patterns进一步在Kibana中管理或修改索引模式.

You can further manage or modify index patterns in Kibana by going to Management -> Index Patterns.

这篇关于如何在kibana中创建filebeat索引模式?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！