question Re: Kibana dashboard empty on Metron 0.3 in Support Questions

Kibana dashboard empty on Metron 0.3

adroot16 — Fri, 07 Apr 2017 08:49:35 GMT

Hi everyone. I deploy a Metron cluster using Ambari following article https://community.hortonworks.com/articles/60805/deploying-a-fresh-metron-cluster-using-ambari-serv.html. I pushed Bro logs to Kafka and It's show on Discover. But when I access http://metron:5000 then Kibana dashboard empty. Can you help me?

Re: Kibana dashboard empty on Metron 0.3

asubramanian — Fri, 07 Apr 2017 16:53:42 GMT

Hi @Lee Adrian, yes I have also seen that the default dashboard comes up empty unlike the quickdev/fulldev deployments. You will need to create the visualizations, indices etc. manually.

One alternative that I follow is to export the entire dashboard from a quickdev/fulldev, import it into the new cluster, then edit the dashboard configuration. I'm attaching the sample export from fulldev deployment for your reference (fulldev-kibana-exportjson.txt).

Re: Kibana dashboard empty on Metron 0.3

adroot16 — Sat, 08 Apr 2017 11:01:01 GMT

Hi @asubramanian, Thank you very much. I'm have a problem. Wish you counseling help me. I configured YAF Server and I searched Google but I don't push YAF log to Metron.

Re: Kibana dashboard empty on Metron 0.3

asubramanian — Mon, 10 Apr 2017 18:41:25 GMT

Hi @Lee Adrian, have you setup your YAF environment as per this link - https://tools.netsa.cert.org/yaf/ ?

Re: Kibana dashboard empty on Metron 0.3

adroot16 — Tue, 11 Apr 2017 09:03:14 GMT

Hi @asubramanian, Command "rwfilter --proto=0- --type=all --pass=stdout | rwcut | tail" showed results. But I can't push data from YAF Server to Metron.

Re: Kibana dashboard empty on Metron 0.3

asubramanian — Tue, 20 Jun 2017 00:16:13 GMT

Hi @Lee Adrian, apparently there is an easier way to enable the default dashboard on Metron.

* Launch Ambari UI

* Go to Services -> Metron

* Choose Service Actions -> Elasticsearch Template Install; and confirm on dialog.

* Next, go to Services -> Kibana

* Choose Service Actions -> Load Template

Now you can launch the Kibana (Metron) UI and the default dashboard should appear. Please give this a try on your environment and let me know if it works.

Credit goes to @David Lyle for helping with this information.

Re: Kibana dashboard empty on Metron 0.3

akashkumarva — Sat, 15 Jul 2017 02:43:49 GMT

Hi @asubramanian I followed these steps as I had a blank Kibana dashboard. However, once I chose the service action to load the Kibana template the operation failed. I created a seperate post with my logs:

https://community.hortonworks.com/questions/113052/load-template-kibana-server-failing.html

Any help would be appreciated thanks.