How to extract all log sources in ELK?

Elastic Stack Elasticsearch
1

Hi team,

I'm new in elastic stack , please i need a procedure how to extract all the source logs IP and status if possible, for example i have 10 servers linux redhat integrated in elastic with auditbeat and i have 10 windows integrated with winlogbeat how to extract all this servers with hostname and status with last event.

Thanks in advance

2

Hi @UP_NEWS,

Is there a particular format you're looking to export it into? One possible way is to query the dataset in the Discover app in Kibana and either share the link or export to CSV:

image
image5120×898 316 KB

3

i don't need to export data i need to extract IP of servers integrated in ELK and their status if possible.

4

What do you mean by extract?

5

GET all ips adress for endpoints like : pc /switch / servers ... without logs only IP and time of last event

6

You should be able to use Discover to see the data you need by selecting the relevant columns (i.e. ip and @timestamp) and the time range that you are interested in within the datepicker:

image
image2532×1674 407 KB

That will show only the fields in your document that you want to see.

7

Thanks a lot @carly.richmond

1 Like
8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.