Logstash xpack monitoring plugin with ES 5.2.2 and LS 5.2.0

1

Hey,
Looks like we can’t see any monitoring data from logstash on our kibana.
Is there any specific configuration i need to use to make it work?
Usually we are seeing monitoring data from ES\Kibana and LS, this is what i can see after installing and configure ROR plugin -

image.png707×704 16.4 KB

This is the conf i’m using in the ES side -

- name: "::LOGSTASH::"
  auth_key_sha256: "the hash goes here"
  type: allow
- name: "::KIBANA::"
  auth_key_sha256: "the hash goes here"
  type: allow

and also tried with these configurations -

- name: "::LOGSTASH::"
  auth_key_sha256: "the hash goes here"
  actions: ["cluster:monitor/main","indices:admin/types/exists","indices:data/read/*","indices:data/write/*","indices:admin/template/*","indices:admin/create"]
  indices: ["*"]
- name: "::KIBANA::"
  auth_key_sha256: "the hash goes here"
  type: allow

Thanks!

2

this can be omitted.

all of these can be omitted

For the missing data, observe the ES logs and see what requests are being “forbidden”, modify your rules accordingly.