Zipkin + Elasticsearch (ELK) not create index

[blenolopes]

Hi everyone!

I have "ELK" (6.4.2) working perfectly with filebeat, metricbeat, packetbeat and winlogbeat in CentOS 7 x86_64 (Kernel 3.10.0-862.11.6.el7.x86_64).

I'm trying to integrate zipkin + elk (see https://logz.io/blog/zipkin-elk/), but Elasticsearch does not create indices with Kibana.

When trying to create the indices in Kibana, the process does not end. (Follow logs below).

I suspect the zipkin connection drivers are not compatible with elk 6.4.2. Has anyone had the same problem and has a "light at the end of the tunnel"?

Tks for all!

Java version:

java version "1.8.0_181"
Java(TM) SE Runtime Environment (build 1.8.0_181-b13)
Java HotSpot(TM) 64-Bit Server VM (build 25.181-b13, mixed mode)

Zipkin startup:

java -DSTORAGE_TYPE=elasticsearch -DES_HOSTS=http://localhost:9200 -jar /opt/zipkin.io/bin/zipkin.jar

Error log in Elasticsearch:

[2018-10-24T11:31:59,933][WARN ][o.e.d.i.m.MapperService  ] Setting index.mapper.dynamic is deprecated since indices may not have more than one type anymore.
[2018-10-24T11:31:59,936][WARN ][o.e.d.i.m.MapperService  ] [_default_] mapping is deprecated since it is not useful anymore now that indexes cannot have more than one type
[2018-10-24T11:31:59,954][WARN ][o.e.d.i.m.MapperService  ] Setting index.mapper.dynamic is deprecated since indices may not have more than one type anymore.
[2018-10-24T11:32:00,033][WARN ][o.e.d.c.m.MetaDataCreateIndexService] index or alias name [zipkin:span-2018-10-24] containing ':' is deprecated and will not be supported in Elasticsearch 7.0+
[2018-10-24T11:32:00,245][WARN ][o.e.d.i.m.MapperService  ] Setting index.mapper.dynamic is deprecated since indices may not have more than one type anymore.

[remd]

The screenshot you included is showing the Kibana management page for creating index patterns, not the indices themselves.

Furthermore, the entries from the deprecation log you have included seem to imply the index creation is working:

[2018-10-24T11:32:00,033][WARN ][o.e.d.c.m.MetaDataCreateIndexService] index or alias name [zipkin:span-2018-10-24] containing ':' is deprecated and will not be supported in Elasticsearch 7.0+

Can you query Elasticsearch directly and check if the indices appear in the list or not?

GET _cat/indices/*zipkin*?s=index

[codefromthecrypt]

ps oh boy on that colon thing.. let's raise a new issue to track this as this will be disruptive (second major time something like this in index expression for us. first was having to put the type name in in the first place.)

[codefromthecrypt]

opened an issue on the colon bomb #2219

[blenolopes]

opened an issue on the colon bomb #2219

Tks adriancole, I'll go there!