I am new to Elastic .
I have setup like Filebeat->ES<-Kibana
Data is unformatted with single lines and multiple lines of logs and inserted into ES from Filebeat.
Based on multi line expression new line is inserted into ES successfully.
I need feature like some bookmark with predefined Api names from my logs...for eg api1 api2 .
Once I select api1 and give the search term in lucene kibana should show all the resutls for the API1.
Basically I am too lazy to search with "<< search word>>" AND "<< apiname >>"
in lucene.
Any pointers or tutorial will be really appreciated.