After loading metrics templates in Kibana with:
root@elkserver1:/usr/share/metricbeat/scripts# ./import_dashboards Create temporary directory /tmp/tmp010975537 Downloading https://artifacts.elastic.co/downloads/beats/beats-dashboards/beats-dashboards-5.1.1.zip Unzip archive /tmp/tmp010975537 /tmp/tmp010975537/beats-dashboards-5.1.1/filebeat /tmp/tmp010975537/beats-dashboards-5.1.1/heartbeat /tmp/tmp010975537/beats-dashboards-5.1.1/metricbeat Import directory /tmp/tmp010975537/beats-dashboards-5.1.1/metricbeat/index-pattern Import index to /.kibana/index-pattern/metricbeat-* from /tmp/tmp010975537/beats-dashboards-5.1.1/metricbeat/index-pattern/metricbeat.json Import directory /tmp/tmp010975537/beats-dashboards-5.1.1/metricbeat/dashboard Import dashboard /tmp/tmp010975537/beats-dashboards-5.1.1/metricbeat/dashboard/CPU-slash-Memory-per-container.json .... ....
Several Dashboard seems to fail:
Is seems that some field references in the Json code are wrong for several Visualizations used on the Dashboards, as example I will take the Visualization "Disk space distribution", where the field reference is missing. See the actual json for the Visualization in the right side (this can be found under Visualizations > Manage Visualizations):
GUI Build of the Visualization | JSON from the Import |
---|---|
{ "title": "Disk space distribution", "type": "pie", "params": { "shareYAxis": true, "addTooltip": true, "addLegend": true, "isDonut": false }, "aggs": [ { "id": "1", "enabled": true, "type": "sum", "schema": "metric", "params": { "field": "system.filesystem.total", "customLabel": "Total size" } }, { "id": "2", "enabled": true, "type": "terms", "schema": "segment", "params": { "field": "system.filesystem.mount_point", "size": 5, "order": "desc", "orderBy": "1", "customLabel": "Mount point" } } ], "listeners": {} } |
In fact, it seems that "system.filesystem.mount_point" does not exist, so I do replace it with "system.filesystem.mount_point.keyword" that does, and save the Visualization - and hence it works: