Kibana在“发现”选项卡中不显示任何结果 [英] Kibana doesn't show any results in “Discover” tab

问题描述

我已经设置了elasticsearch（1.7.3版本）和Kibana（版本4.1.2），用于索引我们的应用程序的Elmah XML文件错误。我正在使用.Net来解析xml文件和Nest ElasticSearch客户端，将索引插入到ElasticSearch中。问题是Kibana不会在发现选项卡中显示任何数据。

当我运行curl -XGET localhost：9200 / .kibana / index-pattern / EOL？命令，我得到以下响应：

  {_ index：。kibana，_ type：index-pattern _ id：eol，_ version：2，found：tru 
e，_ source：{title：eol，timeFieldName：errorTime ：[{\name\：\_i 
 ndex\，\type\：\string\，\count\：0 ，\scripted\：false，\indexed\：false，\a 
 alyzed\：false，\doc_values\：false}，{\ name \：\filePath\，\type\：\string\，
 \count\：0，\scripted\ ：false，\indexed\：true，\analyze\：true，\doc_values\
：false}，{\name \：\ _type\，\type\：\string\，\count\：0，\scripted\：false，\ 
 \：true，\analyze\：false，\doc_values\：false}，{\name \：\message\，\ 
 type\：\ string\ \\count\：0，\scripted\：false，\indexed\：true，\analyze\：
 true，\doc_values\ ：false}，{\name\：\errorTime\，\type\：\date\，\count\：0 
 ，\scripted\：false，\indexed\：true，\analyze\：false，\doc_values\：false}，{\ 
 name\ ：\ _source\，\ type\：\ _source\，\ count\：0，\ scripted\：假，\\ \\indexe 
d\：false，\analyze\：false，\doc_values\：false}，{\name \：\_id \\ ，\type\：\
 string\，\count\：0，\scripted\：false，\indexed\：false ，\analyze\：false，\d 
 oc_values\：false}]}} 
  

当前情况
Elasticsearch正在运行，响应API直接在弹性搜索上执行查询，如

Kibana正在运行，甚至找到eol 由Elasticsearch曝光的索引
Kibana还显示eol文档的正确属性和数据类型
发现选项卡不显示任何结果...即使将时间段设置为一对的年...
我已经尝试从设置选项卡中删除索引，重新启动Kibana，然后在设置中重新添加索引。
我也试图用yyyy-MM-ddThh：mm：ss格式保存日期字段，但是我仍然看不到任何结果。
我认为问题是Elmah UTC的日期格式（一个例子是2015-10-13T19：54：49.4547709Z）或Elmah消息。我猜ElasticSearch喜欢Elmah消息，但是Kibana没有。

任何想法？

Kibana如何看待eol索引：

..我在发现标签中看到的是：

解决方案

你有\通常在弹性搜索结果中没有，JSON不能解析结果，因为它不合适，

I have setup elasticsearch(version 1.7.3) and Kibana(version 4.1.2) for indexing our application's Elmah XML files errors. I am using .Net to parse the xml files and Nest ElasticSearch client to insert the indexes into ElasticSearch. The issue is that Kibana doesn't display any data in the "Discover" tab.

When I run curl -XGET localhost:9200/.kibana/index-pattern/eol? command, I get the following response:

{"_index":".kibana","_type":"index-pattern","_id":"eol","_version":2,"found":tru
e,"_source":{"title":"eol","timeFieldName":"errorTime","fields":"[{\"name\":\"_i
ndex\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":false,\"an
alyzed\":false,\"doc_values\":false},{\"name\":\"filePath\",\"type\":\"string\",
\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":true,\"doc_values\"
:false},{\"name\":\"_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\
"indexed\":true,\"analyzed\":false,\"doc_values\":false},{\"name\":\"message\",\
"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":
true,\"doc_values\":false},{\"name\":\"errorTime\",\"type\":\"date\",\"count\":0
,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":false},{\
"name\":\"_source\",\"type\":\"_source\",\"count\":0,\"scripted\":false,\"indexe
d\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"_id\",\"type\":\"
string\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"d
oc_values\":false}]"}}

Current situation Elasticsearch is up and running, responds to API executing a query directly on Elasticsearch like http://localhost:9200/eol/_search?q=* returns lots of results

Kibana is up and running, even finds the "eol" index exposed by Elasticsearch Kibana also shows the correct properties and data type of the "eol" documents "Discover" tab doesn't show any results...even when setting the time period to a couple of years... I have tried Delete the index from the Settings tab, restart Kibana, then re-adding index in Settings. I have also tried to save the date field with a yyyy-MM-ddThh:mm:ss format but I still do not see any results. I believe the issue is with either the Elmah UTC date format(An example is 2015-10-13T19:54:49.4547709Z) or the Elmah message. I guess ElasticSearch likes the Elmah message but Kibana does not.

Any ideas??

Here's how Kibana sees the "eol" index:

..and what I see in the discover tab:

解决方案

you have "\" , normally in elasticsearch result there is not, JSON can not parse the result because it is not appropriate,

这篇关于Kibana在“发现”选项卡中不显示任何结果的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！