After lot of struggle finally we are able to extract the fields from raw event logs and we are getting the events as per our requirement in Kibana Discover tab. We have 2 fields that is “Certificate” (which contains certificate names) and “Days_Remaining”(which shows the number of days left for certificate expiry) . Now we want them to put in a tabular format dashboard, hence we are very new to this ELK we are starting with a simple dashboard by just saving this search and open it in Visualize tab. We are able to see the data as expected but we need these modifications done on that.
- We need to sort this table in descending order as per the field “Days_Remaining” as the table is in random format.
Note : We have something called “sort” query in splunk but we are not finding it in Kibana
- We need to rename the “Time” field to something else or we want to rename it.
Can some one please help on this..