How can we use ELK for proactive decision making in an IT operation

malindu · April 4, 2019, 5:05am

Hi,

I am looking for evaluating ELK to use it for proactive decision making while reducing interruptions due to incidents. I've installed the ELK and started forwarding logs of selected test servers. when it comes to Kibana, I found it difficult to interpret the dash boards and the logs are not in an understandable format. Can we get Windows Event logs to the Kibana dashboards in a meaningful way? Can somebody help on this?

warkolm · April 4, 2019, 5:07am

Are you using Winlogbeat to send data to Elasticsearch?

malindu · April 4, 2019, 5:44am

Yes. Winlogbeat

malindu · April 10, 2019, 5:41am

Please help us for way forward this

Christian_Dahlqvist · April 10, 2019, 6:03am

This is a very general and high level question which is hard to answer. You might have a better chance to get a meaningful answer if you describe what you have done and provide more details around the problems you are having.

malindu · April 10, 2019, 6:37am

Hi Christian,
we have already installed the ELK and forwarded the logs of few testing servers. We can't understand the log itself. it is shown as on the screenshot we sent. And when we take the dashboard, it shows some figures which we can't find where it has come from.

malindu · April 25, 2019, 5:12am

Please help us for way forward this

system · May 23, 2019, 5:12am

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.