Log storage location ELK stack

elasticsearch logstash kibana logstash-forwarder elastic-stack
Anand j. Kadhi picture Anand j. Kadhi · Apr 24, 2015 · Viewed 8.8k times · Source

I am doing centralized logging using logstash. I am using logstash-forwarder on the shipper node and ELK stack on the collector node.I wanted to know the location where the logs are stored in elasticsearch i didn't see any data files created where the logs are stored.Do anyone has idea about this?

Answer

Tomer Levy picture Tomer Levy · May 28, 2015
  1. Login to the server that runs Elasticsearch
  2. If it's an ubuntu box, open the /etc/elasticsearch/elasticsearch.yml
  3. Check out the path.data configuration
  4. The files are stored on that location

Good luck.

Related questions

How to retrieve unique count of a field using Kibana + Elastic Search

Is it possible to query for a distinct/unique count of a field using Kibana? I am using elastic search as my backend to Kibana. If so, what is the syntax of the query? Heres a link to the Kibana …

Read More
Logstash date parsing as timestamp using the date filter

Well, after looking around quite a lot, I could not find a solution to my problem, as it "should" work, but obviously doesn't. I'm using on a Ubuntu 14.04 LTS machine Logstash 1.4.2-1-2-2c0f5a1, and I am …

Read More
SearchPhaseExecutionException[Failed to execute phase [query], all shards failed]

Recently our server was rebooted without correctly shutting down the Elastic Search / Kibana. After that reboot, both applications were running but no indices were getting created anymore. I checked logstash setup in debug mode and it is sending data to …

Read More