Freeradius 3.0.17 and elasticsearch

[Bassem Mettichi]

Hello,

the logstash-radius.conf is not compatible with logstash v 6.2 i have these
error messages in logstash logs:

[2018-05-15T11:47:51,141][ERROR][logstash.filters.kv      ] Unknown setting
'trim' for kv
[2018-05-15T11:47:51,141][ERROR][logstash.filters.kv      ] Unknown setting
'trimkey' for kv


any idea how to solve this issue?


Thanks
Mettichi bassem

2018-05-14 18:24 GMT+01:00 Bassem Mettichi <mettichi at gmail.com>:

> Hello,
> Iam using kibana 6.2
>
> Le lun. 14 mai 2018 18:18, Matthew Newton <mcn at freeradius.org> a écrit :
>
>> On Mon, 2018-05-14 at 17:58 +0100, Bassem Mettichi wrote:
>> > i have imported the dashbord on kibana but i have this error message:
>> >
>> > Could not locate that visualization (id:
>> > RADIUS-accounting-packets-histogram)
>> > Could not locate that visualization (id: RADIUS-unique-User-Name-by-
>> > day)
>> > Could not locate that visualization (id:
>> > RADIUS-table-topN-data-transferred-by-User-Name)
>>
>> What versions?
>>
>> The examples were created for Kibana 4 (and tested to work on Kibana
>> 5), but it's very possible they don't work on Kibana 6. The
>> Elasticsearch stack tend to move forwards pretty fast, so it wouldn't
>> suprise me if the kibana dashboards don't work as-is any more.
>>
>> IIRC you *might* need to import the kibana config twice, as it might
>> not get dependencies correct the first time (so not be able to find the
>> visualisations for the dashboard, as you've seen).
>>
>> > root at buildfr logstash]# systemctl status logstash
>> > ● logstash.service - logstash
>> >    Loaded: loaded (/etc/systemd/system/logstash.service; enabled;
>> > vendor
>> > preset: disabled)
>> >    Active: active (running) since Mon 2018-05-14 16:57:24 UTC; 18s
>> > ago
>> >  Main PID: 24637 (java)
>>
>> So, have you checked if any data is actually getting into
>> elasticsearch? Use the _cat and search APIs to have a look to make sure
>> the data is arriving. Or just use the discover page in Kibana.
>>
>> Assuming the data is arriving, building a new dashboard should be
>> pretty straightforward.
>>
>> --
>> Matthew
>>
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/
>> list/users.html
>
>