Hi sura, nice to see you!
In general, newly created indices, in this case my-cystom-log-<timestamp> would not appear automatically in UI objects, called index patterns. You would have to create it on your own and it's pretty simple:
- Go to
Stack Management module
- Click on
Index Patterns on right menu
- On top right corner click
Create Index Pattern and follow the instructions
If you still don't see indices there, it means index has not been created or it has no documents. That would mean that:
- Data is in fact not flowing
- Pipeline is working fine, but there's no new entries or no access to the file that Network Probe/Parser would monitor.
I'd check if Logstash service has access to file meantioned in configuration and rights to read it and if there are new events in the file. Also the common doom of us all are the simple typos, so it's worth checking if there is none in the config file.
Finally I'd add in the configuration empty filter {} section, just to make sure that service has all the sections, even if they are empty.
Let me know if any of that helped. If not - just follow with this thread and we'll see what else could be the problem. 🙂
