Skip to content

Instantly share code, notes, and snippets.

@cyhook

cyhook/ELK Errors.md

Last active October 3, 2017 17:59
Show Gist options
  • Save cyhook/b9c3d6eab7673d2ca07b347a324bc7d5 to your computer and use it in GitHub Desktop.
Save cyhook/b9c3d6eab7673d2ca07b347a324bc7d5 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
ELK Errors.md

1. Failed to create Monitoring events errors

[2017-10-03T20:21:09,732][ERROR][logstash.inputs.metrics ] Failed to create monitoring event {:message=>"For path: events", :error=>"LogStash::Instrument::MetricStortricNotFound"}

Add the following line to /etc/elasticsearch/elasticsearch.yml and restart elasticsearch

nano /etc/elasticsearch/elasticsearch.yml 
paste: action.auto_create_index: .security,.security-6,.monitoring*,.watches,.triggered_watches,.watcher-history*
ctrl x --> y --> Enter
service elasticsearch restart

2. Permission denied Wazuh after implementing kafka

message":"EACCES: permission denied, open '/usr/share/kibana/optimize/bundles/wazuh.entry.js'","name":"Error","stack":"Error: EACCES: permission denied, open '/usr/share/kibana/optimize/bundles/wazuh.entry.js

Do the following

chown -R kibana /usr/share/kibana/optimize/bundles/*
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment