Skip to content

Commit

Permalink
Use [packetbeat-]YYYY.MM.DD to better manage query and dashboard in
Browse files Browse the repository at this point in the history 
Elasticsearch
  • Loading branch information
Fedele Mantuano committed Jul 28, 2015
1 parent 84ee865 commit 81071fd
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions docs/gettingstarted.asciidoc
View file
Original file line number Diff line number Diff line change
Expand Up @@ -307,12 +307,12 @@ Now point your browser to port 5601 and you should see the Kibana web
interface.
The first thing you need to do is to configure the index pattern. In
the *Index name or pattern* field enter `packetbeat-*` and for the *Time-field
the *Index name or pattern* field enter `[packetbeat-]YYYY.MM.DD` and for the *Time-field
name* select `timestamp`.
image:./images/kibana-index-pattern.png[Kibana index pattern]
If after you configure the `packetbeat-*` index pattern Kibana still says
If after you configure the `[packetbeat-]YYYY.MM.DD` index pattern Kibana still says
_Unable to fetch mapping. Do you have indices matching the pattern?_, it means
that Packetbeat hasn't yet written any data into Elasticsearch. Make sure that
some traffic was running on your servers and that Packetbeat could see it.
Expand Down

0 comments on commit 81071fd

Please sign in to comment.