Is reading elastic logs from a node directly possible?

Hi all

Is there a way to read logs (sent to elastic by Logstash) directly from an Elasticsearch node? Our Elasticsearch version is 8.30.
Because of a Ransomware attack, we currently do not have access to the Kibana VM. If possible, we would like to refrain from setting up a new Kibana VM.

Alternatively, is there a way to read them with curl -XGET?

Thanks

Hi,

I am sorry to hear that you were the target of a ransomware attack. The good news is that you do not need to setup a Kibana instance - you can use the normal Elasticsearch REST API to search your logs: Search API | Elasticsearch Guide [8.9] | Elastic

Best regards
Wolfram

2 Likes

Hi Wolfram

I will try that.
Thanks for the tip.

Best Regards.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.