# Dashboard for file access logs

**URL:** <https://discuss.elastic.co/t/dashboard-for-file-access-logs/251260>\
**Category:** Kibana\
**Created:** [October 7, 2020, 11:47am UTC](https://discuss.elastic.co/t/dashboard-for-file-access-logs/251260 "2020-10-07T11:47:16Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Craig2188](https://avatars.discourse-cdn.com/v4/letter/c/858c86/32.png) [@Craig2188](https://discuss.elastic.co/u/Craig2188)\
**Post date:** [October 7, 2020, 11:47am UTC](https://discuss.elastic.co/t/dashboard-for-file-access-logs/251260/1 "2020-10-07T11:47:16Z")

</div>

Hi,  
We are being tasked with pushing event logs for file access to Kibana:  
Winlogbeat \> Logstash \> ES/Kibana

I will filter it down to specific Event ID's in the winlog YML file and then let it run for 30 days to collate enough information for us to go by.

The query I have now is, how can I set up a relevant dashboard that can show me the below scenarios:

Shares/Paths  
Some chart or filtered list to show this and then when you go into it, it can filter through what account has attempted access for read/write etc

Access denied  
A chart to show all access attempts to shares and what account attempted access

Access approved  
A chart to show successful access to a share

Then something similar for permissions and the file access, for read/write

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 4, 2020, 11:47am UTC](https://discuss.elastic.co/t/dashboard-for-file-access-logs/251260/2 "2020-11-04T11:47:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.