Hello, the logstash-radius.conf is not compatible with logstash v 6.2 i have these error messages in logstash logs: [2018-05-15T11:47:51,141][ERROR][logstash.filters.kv ] Unknown setting 'trim' for kv [2018-05-15T11:47:51,141][ERROR][logstash.filters.kv ] Unknown setting 'trimkey' for kv any idea how to solve this issue? Thanks Mettichi bassem 2018-05-14 18:24 GMT+01:00 Bassem Mettichi <mettichi@gmail.com>:
Hello, Iam using kibana 6.2
Le lun. 14 mai 2018 18:18, Matthew Newton <mcn@freeradius.org> a écrit :
On Mon, 2018-05-14 at 17:58 +0100, Bassem Mettichi wrote:
i have imported the dashbord on kibana but i have this error message:
Could not locate that visualization (id: RADIUS-accounting-packets-histogram) Could not locate that visualization (id: RADIUS-unique-User-Name-by- day) Could not locate that visualization (id: RADIUS-table-topN-data-transferred-by-User-Name)
What versions?
The examples were created for Kibana 4 (and tested to work on Kibana 5), but it's very possible they don't work on Kibana 6. The Elasticsearch stack tend to move forwards pretty fast, so it wouldn't suprise me if the kibana dashboards don't work as-is any more.
IIRC you *might* need to import the kibana config twice, as it might not get dependencies correct the first time (so not be able to find the visualisations for the dashboard, as you've seen).
root@buildfr logstash]# systemctl status logstash ● logstash.service - logstash Loaded: loaded (/etc/systemd/system/logstash.service; enabled; vendor preset: disabled) Active: active (running) since Mon 2018-05-14 16:57:24 UTC; 18s ago Main PID: 24637 (java)
So, have you checked if any data is actually getting into elasticsearch? Use the _cat and search APIs to have a look to make sure the data is arriving. Or just use the discover page in Kibana.
Assuming the data is arriving, building a new dashboard should be pretty straightforward.
-- Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html