# Kibana suricata integration

**URL:** <https://discuss.elastic.co/t/kibana-suricata-integration/290363>\
**Category:** Kibana\
**Created:** [November 28, 2021, 1:42pm UTC](https://discuss.elastic.co/t/kibana-suricata-integration/290363 "2021-11-28T13:42:45Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![algira37](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/algira37/32/88482_2.png) [@algira37](https://discuss.elastic.co/u/algira37)\
**Post date:** [November 28, 2021, 1:42pm UTC](https://discuss.elastic.co/t/kibana-suricata-integration/290363/1 "2021-11-28T13:42:45Z")

</div>

Hello,

I added suricata integration to my system, but I can't use filebeat suricata module so I configured filebeat to send logs without suricata module to ELK, I just wondering is there any solution to use kibana integration with my own index source? My index is suricatalogs-\* , and I can access to rebuild Suricata specific kibana dashboard.

---

<div class="post-metadata">

**Author:** ![monfera](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/monfera/32/26467_2.png) [@monfera](https://discuss.elastic.co/u/monfera)\
**Post date:** [December 13, 2021, 9:47am UTC](https://discuss.elastic.co/t/kibana-suricata-integration/290363/2 "2021-12-13T09:47:45Z")

</div>

You can create an [index pattern](https://www.elastic.co/guide/en/kibana/current/index-patterns.html) - changing to Data View in the future - with `suricatalogs-*` and then use it for creating visualizations for Dashboard use, or for exploring your data in Discover.

Alternatively in Canvas, you can use the index names (permitting asterisk too) directly in queries such as SQL queries

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 10, 2022, 9:47am UTC](https://discuss.elastic.co/t/kibana-suricata-integration/290363/3 "2022-01-10T09:47:47Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
