# How do I process sended data?

**URL:** <https://discuss.elastic.co/t/how-do-i-process-sended-data/288991>\
**Category:** Elasticsearch\
**Created:** [November 11, 2021, 12:33pm UTC](https://discuss.elastic.co/t/how-do-i-process-sended-data/288991 "2021-11-11T12:33:38Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![smam](https://avatars.discourse-cdn.com/v4/letter/s/46a35a/32.png) [@smam](https://discuss.elastic.co/u/smam)\
**Post date:** [November 11, 2021, 12:33pm UTC](https://discuss.elastic.co/t/how-do-i-process-sended-data/288991/1 "2021-11-11T12:33:38Z")

</div>

Hello,  
I managed to send my data to Elasticsearch via Logstash/Filebeat and the modules Plugin aknowledges that. ("Received data from this module") but how can I actually get from the Elasticsearch start page to the Analytics of my Log files? I want to get a Graph or something.

EDIT: I want to add e.g. switch.log

I then configure filebeat/modules.d/system.yml:  
var.paths: [/var/log/storage.log, /var/log/switch.log]

Response:  
2021-11-11T14:18:43.202+0100 INFO [input.harvester] log/harvester.go:309 Harvester started for file. {"input\_id": "", "source": "/var/log/switch.log", "state\_id": "native::1132729-64768", "finished": false, "os\_id": "1132729-64768", "old\_source": "/var/log/switch.log", "old\_finished": true, "old\_os\_id": "1132729-64768", "harvester\_id": ""}

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 14, 2021, 9:33pm UTC](https://discuss.elastic.co/t/how-do-i-process-sended-data/288991/2 "2021-11-14T21:33:32Z")

</div>

If you are using modules, most of them come with pre-built dashboards you can use.

---

<div class="post-metadata">

**Author:** ![smam](https://avatars.discourse-cdn.com/v4/letter/s/46a35a/32.png) [@smam](https://discuss.elastic.co/u/smam)\
**Post date:** [November 16, 2021, 11:14am UTC](https://discuss.elastic.co/t/how-do-i-process-sended-data/288991/3 "2021-11-16T11:14:00Z")

</div>

And where can I find these Dashboards and can I make them use only one Logfile x?  
I clicked through Observability and Analytics but I did not find what I was looking for..

---

<div class="post-metadata">

**Author:** ![smam](https://avatars.discourse-cdn.com/v4/letter/s/46a35a/32.png) [@smam](https://discuss.elastic.co/u/smam)\
**Post date:** [November 16, 2021, 11:20am UTC](https://discuss.elastic.co/t/how-do-i-process-sended-data/288991/4 "2021-11-16T11:20:23Z")

</div>

What bothers me is that I have to go to the add-data menu to select a module each time. The data is uploaded and should therefore be visible in another way than "add-data-\>check module-\>Received data from this module-\>Go to (x) Dashboards", right?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 16, 2021, 9:53pm UTC](https://discuss.elastic.co/t/how-do-i-process-sended-data/288991/5 "2021-11-16T21:53:08Z")

</div>

You should just be able to load the dashboard from the menu on the left in Kibana?

---

<div class="post-metadata">

**Author:** ![smam](https://avatars.discourse-cdn.com/v4/letter/s/46a35a/32.png) [@smam](https://discuss.elastic.co/u/smam)\
**Post date:** [November 18, 2021, 12:26pm UTC](https://discuss.elastic.co/t/how-do-i-process-sended-data/288991/6 "2021-11-18T12:26:25Z")

</div>

Oh, yes. But I guess that, if my requested Dashboard is not existing there, I will have to create a filter myself. Right?

I can find the Linux System Dashboard, but thats it. ( My custom Log-Files are still not appearing)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 19, 2021, 4:04am UTC](https://discuss.elastic.co/t/how-do-i-process-sended-data/288991/7 "2021-11-19T04:04:28Z")

</div>

If you are talking about a custom dashboard, then yes, you will need to create that.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 17, 2021, 4:04am UTC](https://discuss.elastic.co/t/how-do-i-process-sended-data/288991/8 "2021-12-17T04:04:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
