# How can we use ELK for proactive decision making in an IT operation

**URL:** <https://discuss.elastic.co/t/how-can-we-use-elk-for-proactive-decision-making-in-an-it-operation/175317>\
**Category:** Elasticsearch\
**Created:** [April 4, 2019, 5:05am UTC](https://discuss.elastic.co/t/how-can-we-use-elk-for-proactive-decision-making-in-an-it-operation/175317 "2019-04-04T05:05:12Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![malindu](https://avatars.discourse-cdn.com/v4/letter/m/54ee81/32.png) [@malindu](https://discuss.elastic.co/u/malindu)\
**Post date:** [April 4, 2019, 5:05am UTC](https://discuss.elastic.co/t/how-can-we-use-elk-for-proactive-decision-making-in-an-it-operation/175317/1 "2019-04-04T05:05:13Z")

</div>

Hi,

 ![ELK%20logs](https://us1.discourse-cdn.com/elastic/original/3X/c/2/c2f8575d25bd386d605ef58b4a159827f316181a.jpeg) I am looking for evaluating ELK to use it for proactive decision making while reducing interruptions due to incidents. I've installed the ELK and started forwarding logs of selected test servers. when it comes to Kibana, I found it difficult to interpret the dash boards and the logs are not in an understandable format. Can we get Windows Event logs to the Kibana dashboards in a meaningful way? Can somebody help on this?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [April 4, 2019, 5:07am UTC](https://discuss.elastic.co/t/how-can-we-use-elk-for-proactive-decision-making-in-an-it-operation/175317/2 "2019-04-04T05:07:40Z")

</div>

Are you using Winlogbeat to send data to Elasticsearch?

---

<div class="post-metadata">

**Author:** ![malindu](https://avatars.discourse-cdn.com/v4/letter/m/54ee81/32.png) [@malindu](https://discuss.elastic.co/u/malindu)\
**Post date:** [April 4, 2019, 5:44am UTC](https://discuss.elastic.co/t/how-can-we-use-elk-for-proactive-decision-making-in-an-it-operation/175317/3 "2019-04-04T05:44:59Z")

</div>

Yes. Winlogbeat

---

<div class="post-metadata">

**Author:** ![malindu](https://avatars.discourse-cdn.com/v4/letter/m/54ee81/32.png) [@malindu](https://discuss.elastic.co/u/malindu)\
**Post date:** [April 10, 2019, 5:41am UTC](https://discuss.elastic.co/t/how-can-we-use-elk-for-proactive-decision-making-in-an-it-operation/175317/4 "2019-04-10T05:41:04Z")

</div>

Please help us for way forward this

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [April 10, 2019, 6:03am UTC](https://discuss.elastic.co/t/how-can-we-use-elk-for-proactive-decision-making-in-an-it-operation/175317/5 "2019-04-10T06:03:49Z")

</div>

This is a very general and high level question which is hard to answer. You might have a better chance to get a meaningful answer if you describe what you have done and provide more details around the problems you are having.

---

<div class="post-metadata">

**Author:** ![malindu](https://avatars.discourse-cdn.com/v4/letter/m/54ee81/32.png) [@malindu](https://discuss.elastic.co/u/malindu)\
**Post date:** [April 10, 2019, 6:37am UTC](https://discuss.elastic.co/t/how-can-we-use-elk-for-proactive-decision-making-in-an-it-operation/175317/6 "2019-04-10T06:37:38Z")

</div>

Hi Christian,  
we have already installed the ELK and forwarded the logs of few testing servers. We can't understand the log itself. it is shown as on the screenshot we sent. And when we take the dashboard, it shows some figures which we can't find where it has come from.

 ![Multi%20server](https://us1.discourse-cdn.com/elastic/original/3X/f/8/f88db61459f67b7e7f86ebb11cebae6310a74e6f.jpeg) ![Single%20server](https://us1.discourse-cdn.com/elastic/original/3X/b/1/b1dd5fc22aea2ef646ff5e3c3da3d912a9a6a0be.jpeg)

---

<div class="post-metadata">

**Author:** ![malindu](https://avatars.discourse-cdn.com/v4/letter/m/54ee81/32.png) [@malindu](https://discuss.elastic.co/u/malindu)\
**Post date:** [April 25, 2019, 5:12am UTC](https://discuss.elastic.co/t/how-can-we-use-elk-for-proactive-decision-making-in-an-it-operation/175317/7 "2019-04-25T05:12:22Z")

</div>

Please help us for way forward this

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 23, 2019, 5:12am UTC](https://discuss.elastic.co/t/how-can-we-use-elk-for-proactive-decision-making-in-an-it-operation/175317/8 "2019-05-23T05:12:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
