Getting string value from search and display on Dashboard

[Stephen_Im]

Hi,

I am new to Elastic. I was able to get system logs, and I like to put summary per each syslog to dashboard. If I want to put the unique information of each syslog to dashboard. How can I do that? That's pretty much getting syslog value and put it in as strings on dashboard.

will appreciate for any helpful information. Thanks

[bhavyarm]

Hi,

I am a bit confused here. Do you need help in knowing how to create a visualization and add it to dashboard? or a particular visualization? Kibana has multiple visualizations which might satisfy your requirements.

I also think you should take a look at filebeat: https://www.elastic.co/products/beats/filebeat . It has a module for syslog which can be configured https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-system.html. It comes with a set of prepackaged dashboards. So it might make it easy for you? https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-getting-started.html

Let me know
Thanks,
Bhavya

[Stephen_Im]

Hi Bhavyarm,

Thank you for your reply. Yes, I need help in knowing how to retrieve a value from log message and add it to the dashboard. For example, I am trying to get specific value in log message like port or any unique string in the message. I have different types of logs, so I need to pull logs display in dashboard.

I checked the links you sent, but I can't find a way on the links. Appreciate for your reply.

[bhavyarm]

Hi Stephen,

So - dashboards can contain two kinds of objects.

1. Saved searches: you can do a search in discover, save it and then add it to dashboard. Here I did a search on response:200 and then saved it.

   

2. Visualizations: you can create a visualization and then add it to a dashboard. Here I created a data table on terms aggregation on machine.os
   

   

3. You can see that the dashboard here has both of them on it.
   
   

There is this webinar which might help you to tie the whole thing together: https://www.elastic.co/webinars/getting-started-kibana

This is our user guide: https://www.elastic.co/guide/en/kibana/current/getting-started.html

Thanks,
Bhavya

[Stephen_Im]

Hi Bhavyarm,

Thanks a lot. This is what I was looking for.