Kibana Notes
From Federal Burro of Information
ES on AWS
Comes wth kibnana.
send some app logs from app to firehose, then to es.
as it lands in ES the time field is "time" rather than say @timetamp , or @time.
this is important with you want to do timelion stuff.
You will need to change a config , Management - Advanced Settings:
set : timelion:es.timefield to "time" ( not @time ).
Dump settings
curl -X GET -s http://${HOST}:9200/.kibana/_settings | python3 -m json.tool
Disk full -> readonly lock
If the disk fills up the kibana index ( .kibana ) will got into "read-only" mode.
reset it like this:
curl -X PUT http://${HOST}:9200/.kibana/_settings -d '
{
"index": {
"blocks": {
"read_only_allow_delete": "false"
}
}
}' -H'Content-Type: application/json'
{"acknowledged":true}root@es:/etc/kibana#
