Sample Kibana dashboards

[ddrozdov]

It would be very useful if you could provide some Kibana templates for dockerbeat. Like Elastic does for topbeat: https://github.com/elastic/beats-dashboards

[marminthibaut]

That is not really official, but you can find dashboard for beta 2 here : https://github.com/Ingensi/beats-dashboards/tree/dockerbeat

I just update the repo with my current local version. Blkio visualizations are missing..

[ddrozdov]

That's great! Thank you.

[luckydonald]

Note, all occurences of dockerbeat must be changed to dockbeat

[luckydonald]

Basically:

# get it
git clone https://github.com/Ingensi/beats-dashboards.git
# go into folder
cd beats-dashboards/
# switch to right branch
git checkout dockerbeat
# or the exact commit: 
#git checkout f7a1e93eb387e431fcdf810e49a081d4a84b585d
# replace dockerbeat with dockbeat
find . -type f -exec sed -i 's/dockerbeat/dockbeat/g' {} +
# load it into the server
./load.sh -url 'http://elastic:9200/'

[matajaz]

I have some trouble loading the dashboards.

I get the following errors in Kibana 12 Saved "field" parameter is now invalid. Please select a new field. 14 Visualize: "field" is a required parameter

Are there more tweaks I need to do before I can use the dashboards.

Br Mathias

[matajaz]

I realized that there should be "net......." fileds in the blank fields.

I do not get this statistics: Possibly due to that I use --net=host

I tried to spinn up a container without --net=host making the container run in it's own network. This did not give any more Fields.

I tried to add metaFields (net.rxBytes_ps, net.txBytes_ps and so on) in Kibana's advanced settings but I was still not allowed to use these fields in the visualizations. I seems like there must be some events including the field before it is allowed to use them in visualizations.

Any ideas how to generate the net fileds?

Br Mathias

[ruflin]

The docker module in metricbeat (which was contributed by dockbeat) contains also dashboards.

[luckydonald]

@ruflin: so do I stilll need to make this process outlined in the second post?

[ruflin]

@luckydonald Not sure I can follow your question?

[luckydonald]

@ruflin What do I have to to now, to get dashboards?

[ruflin]

Are you running dockbeat or metricbeat?

[luckydonald]

Wait... There are now two to choose from? That's probably what confused me.

I skipped over the part with the Metricbeat Docker module, you were talking about, sorry.

I currently have neither running, the last time I did, there were some memory issues (#139). Has anyone compared them, and got a glimpse if/how they differ?

[ruflin]

Dockbeat was converted to a module for metricbeat and contributed. So they have the exact same foundation. Recently most changes/fixes went into the docker module in metricbeat.