# ELK stack 8 - Kibana - Filebeat

**URL:** <https://discuss.elastic.co/t/elk-stack-8-kibana-filebeat/365104>\
**Category:** Kibana\
**Created:** [August 19, 2024, 6:32am UTC](https://discuss.elastic.co/t/elk-stack-8-kibana-filebeat/365104 "2024-08-19T06:32:50Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![alrightbabyboy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alrightbabyboy/32/136876_2.png) [@alrightbabyboy](https://discuss.elastic.co/u/alrightbabyboy)\
**Post date:** [August 19, 2024, 6:32am UTC](https://discuss.elastic.co/t/elk-stack-8-kibana-filebeat/365104/1 "2024-08-19T06:32:50Z")

</div>

Hello,

I installed the ELK Stack 8 on debian 12.  
In the virtual machine i have Elasticsearch/Kibana/Logstash.

On my-srv-ip:5601, in the elastic dashboard, just below home, i dont have the menu : -kibana.  
I just have :

- Analytics ; - Search ; -Observability ; -Security ;

Kibana is however running on the server. Is it normal ? should i add the kibana integration ?

I need it because i installed Filebeat on a rsyslog server. I want to send all the rsyslog on my ELK stack to analyze them with Kibana.

I modified the filebeat.yml with informations of ELK but I have the feeling Filebeat does not send anything.

setup.kibana:  
host : "192.168.90.200:5601"

output.elasticsearch:  
host: [192.168.90.200:9022"]  
username: "elastic"  
password: "..."

Thx in advance.

Kind regards,

---

<div class="post-metadata">

**Author:** ![ashishtiwari1993](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashishtiwari1993/32/135241_2.png) [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Post date:** [August 21, 2024, 5:29pm UTC](https://discuss.elastic.co/t/elk-stack-8-kibana-filebeat/365104/2 "2024-08-21T17:29:30Z")

</div>

Hi @alrightbabyboy Welcome to the Elastic community.

Could you please [troubleshoot](https://www.elastic.co/guide/en/beats/filebeat/current/troubleshooting.html) and check if you getting any error in log?

---

<div class="post-metadata">

**Author:** ![alrightbabyboy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alrightbabyboy/32/136876_2.png) [@alrightbabyboy](https://discuss.elastic.co/u/alrightbabyboy)\
**Post date:** [August 22, 2024, 10:09am UTC](https://discuss.elastic.co/t/elk-stack-8-kibana-filebeat/365104/3 "2024-08-22T10:09:50Z")

</div>

hello, thx for wlecome.

On the RSYSLOG SRV, i execute : "sudo filebeat setup", it's returrns :

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/d/8d561eb94053357000e15a30a0d7c504f66871a3.png)

I just want send syslogs to ELK.  
What's wrong ? Is anything else to do ?

How can I retrieve logs from ELK and display them in a dashboard?

I have Elastic 8.15

---

<div class="post-metadata">

**Author:** ![alrightbabyboy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alrightbabyboy/32/136876_2.png) [@alrightbabyboy](https://discuss.elastic.co/u/alrightbabyboy)\
**Post date:** [August 22, 2024, 10:13am UTC](https://discuss.elastic.co/t/elk-stack-8-kibana-filebeat/365104/4 "2024-08-22T10:13:59Z")

</div>

sudo filebeat setup -e :

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/5/d5f24c798beea8ae154bd9a235a64b70dcc5c392.png)

---

<div class="post-metadata">

**Author:** ![ashishtiwari1993](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashishtiwari1993/32/135241_2.png) [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Post date:** [August 29, 2024, 3:58am UTC](https://discuss.elastic.co/t/elk-stack-8-kibana-filebeat/365104/5 "2024-08-29T03:58:45Z")

</div>

what output below command gives -

```auto
filebeat -e -d "*"

```

It will display all logs which will read by filebeat.

---

<div class="post-metadata">

**Author:** ![alrightbabyboy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alrightbabyboy/32/136876_2.png) [@alrightbabyboy](https://discuss.elastic.co/u/alrightbabyboy)\
**Post date:** [August 29, 2024, 10:20am UTC](https://discuss.elastic.co/t/elk-stack-8-kibana-filebeat/365104/6 "2024-08-29T10:20:37Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/4/9/49bb0fa63258f8fceed03116f6c1ae72feb11cc2.png)

---

<div class="post-metadata">

**Author:** ![alrightbabyboy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alrightbabyboy/32/136876_2.png) [@alrightbabyboy](https://discuss.elastic.co/u/alrightbabyboy)\
**Post date:** [August 29, 2024, 11:40am UTC](https://discuss.elastic.co/t/elk-stack-8-kibana-filebeat/365104/7 "2024-08-29T11:40:32Z")

</div>

Tried to restart : - elastic, kibana then logstash.

The RSYSLOG Server has send logs to Kibana. Its a first step.

I dont understand how to visualise them on the syslog dashboard.

I can only see logs on Observability \> Logs \> Stream

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/2/1287e13535c6646df7c47e9f1c03a71db9c7a8d9.png)

---

<div class="post-metadata">

**Author:** ![alrightbabyboy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alrightbabyboy/32/136876_2.png) [@alrightbabyboy](https://discuss.elastic.co/u/alrightbabyboy)\
**Post date:** [August 29, 2024, 7:01pm UTC](https://discuss.elastic.co/t/elk-stack-8-kibana-filebeat/365104/9 "2024-08-29T19:01:48Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/9/7/971dc4f89dc925361ad84a034081ade655bc1c88.png)