Getting string value from search and display on Dashboard

Elastic Stack Kibana
1

Hi,

I am new to Elastic. I was able to get system logs, and I like to put summary per each syslog to dashboard. If I want to put the unique information of each syslog to dashboard. How can I do that? That's pretty much getting syslog value and put it in as strings on dashboard.

will appreciate for any helpful information. Thanks

2

Hi,

I am a bit confused here. Do you need help in knowing how to create a visualization and add it to dashboard? or a particular visualization? Kibana has multiple visualizations which might satisfy your requirements.

I also think you should take a look at filebeat: https://www.elastic.co/products/beats/filebeat . It has a module for syslog which can be configured https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-system.html. It comes with a set of prepackaged dashboards. So it might make it easy for you? https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-getting-started.html

Let me know
Thanks,
Bhavya

3

Hi Bhavyarm,

Thank you for your reply. Yes, I need help in knowing how to retrieve a value from log message and add it to the dashboard. For example, I am trying to get specific value in log message like port or any unique string in the message. I have different types of logs, so I need to pull logs display in dashboard.

I checked the links you sent, but I can't find a way on the links. Appreciate for your reply.

4

Hi Stephen,

So - dashboards can contain two kinds of objects.

  1. Saved searches: you can do a search in discover, save it and then add it to dashboard. Here I did a search on response:200 and then saved it.

    response_200
    response_200.jpg2880×1800 918 KB

  2. Visualizations: you can create a visualization and then add it to a dashboard. Here I created a data table on terms aggregation on machine.os

    create_visualization
    create_visualization.jpg2880×1800 559 KB

datatable
datatable.jpg2880×1800 651 KB

  1. You can see that the dashboard here has both of them on it.
    add_to_dashboard
    add_to_dashboard.jpg2880×1800 754 KB

There is this webinar which might help you to tie the whole thing together: https://www.elastic.co/webinars/getting-started-kibana

This is our user guide: https://www.elastic.co/guide/en/kibana/current/getting-started.html

Thanks,
Bhavya

1 Like
5

Hi Bhavyarm,

Thanks a lot. This is what I was looking for.

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.