# How to load winlogbeat dashboard --\> KIB/ES

**URL:** <https://discuss.elastic.co/t/how-to-load-winlogbeat-dashboard-kib-es/123410>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [March 11, 2018, 6:11am UTC](https://discuss.elastic.co/t/how-to-load-winlogbeat-dashboard-kib-es/123410 "2018-03-11T06:11:57Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![jamesl](https://avatars.discourse-cdn.com/v4/letter/j/c0e974/32.png) [@jamesl](https://discuss.elastic.co/u/jamesl)\
**Post date:** [March 11, 2018, 6:11am UTC](https://discuss.elastic.co/t/how-to-load-winlogbeat-dashboard-kib-es/123410/1 "2018-03-11T06:11:57Z")

</div>

Hi. I'm having difficulty trying to load my default Kibana Dashboard because my ES stack is on a separate system compared to where I have installed winlogbeat.

Does anybody have the correct syntax that I can follow....

PS \> winlogbeat setup --dashboards ........

Thanks.

---

<div class="post-metadata">

**Author:** ![exekias](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/exekias/32/28718_2.png) [@exekias](https://discuss.elastic.co/u/exekias)\
**Post date:** [March 12, 2018, 12:31pm UTC](https://discuss.elastic.co/t/how-to-load-winlogbeat-dashboard-kib-es/123410/2 "2018-03-12T12:31:18Z")

</div>

Hi @jamesl,

`winlogbeat setup --dashboards` should be enough, but you need to make sure winlogbeat has access to both Elasticsearch and Kibana. You don't need to deploy the dashboard from the machine you will be monitoring. If there is a firewall in place, you can always install winlogbeat on a separate windows machine with access, for provisioning purposes.

Best regards

---

<div class="post-metadata">

**Author:** ![jamesl](https://avatars.discourse-cdn.com/v4/letter/j/c0e974/32.png) [@jamesl](https://discuss.elastic.co/u/jamesl)\
**Post date:** [March 12, 2018, 7:49pm UTC](https://discuss.elastic.co/t/how-to-load-winlogbeat-dashboard-kib-es/123410/3 "2018-03-12T19:49:44Z")

</div>

> [@exekias](#):
>
> winlogbeat setup --dashboards

Hi Thanks for the reply Exekias.

I don't have ES or Kib on the box that has Winlogbeat installed. In the old beats package days when I wanted to import that winlogbeats dashboard I had to put a switch at the end of the command like - -es [Http://elasticsearch:9200](Http://elasticsearch:9200) ... or something like that. Is there a switch for this version? There is no firewall between where winlogbeat is installed and the ES/Kib Servers.

---

<div class="post-metadata">

**Author:** ![exekias](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/exekias/32/28718_2.png) [@exekias](https://discuss.elastic.co/u/exekias)\
**Post date:** [March 13, 2018, 10:54am UTC](https://discuss.elastic.co/t/how-to-load-winlogbeat-dashboard-kib-es/123410/4 "2018-03-13T10:54:04Z")

</div>

You can use common configuration for those, `output.elasticsearch.hosts` and `setup.kibana.host`. If you don't want to edit `winlogbeat.yaml` you can also pass these as flags, using `-E`

---

<div class="post-metadata">

**Author:** ![jamesl](https://avatars.discourse-cdn.com/v4/letter/j/c0e974/32.png) [@jamesl](https://discuss.elastic.co/u/jamesl)\
**Post date:** [March 13, 2018, 7:28pm UTC](https://discuss.elastic.co/t/how-to-load-winlogbeat-dashboard-kib-es/123410/5 "2018-03-13T19:28:14Z")

</div>

Thanks, it's working!

I have made the following changes to winlogbeat.yml:  
unhashed out this line and put in my Kibana address (line 71) --\>

`host: "kib01:5601"`

I have my 1 dashboard now - Winlogbeat Dashboard.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 10, 2018, 7:28pm UTC](https://discuss.elastic.co/t/how-to-load-winlogbeat-dashboard-kib-es/123410/6 "2018-04-10T19:28:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
