As you can read in the topic title, I'm a newbie to the whole Elasticsearch stuff, including Kibana and X-Pack. I've been working with an ELK stack for a couple of days now and I'm evaluating all the neat things one can do with it.
We want to use Elasticsearch/Kibana/X-Pack (5.0.x on a Windows platform with 2 servers and 12 clients, no Internet connection) to replace an old COTS tool that's currently used to log Windows events. I'm quite satisfied with the results I get using Elasticsearch, Kibana and Winlogbeat. The logging works and we even have a better performance now as well.
After having spent some time now to convert the filters we use in our old tool into Kibana searches, I'm having a problem getting one last feature to work. We need to create scheduled PDF reports for our system. The creation of said reports works using the reporting plugin from the X-Pack. However, I am having trouble to set up the Watcher plugin the way we need it.
What I have is the generation URL from the reports we want to have automatically created. Then I have knowledge of the syntax I have to use for Watcher after reading the "Getting Started with Watcher" pages. But I seem to be stuck. The example given on the "Automating Report Generation" pages did not really help me. I was not able to rework it in a way that only reports are generated without further actions. I would very much appreciate some help from the experienced users of this community.
After the problem of the automated reports is solved, there would be another issue. Currently, the old tool puts all generated reports in an existing folder structure, which is backed-up regularly. Is it possible to have generated PDFs put in a specific folder via Watcher? The defined actions one can use with Watcher do not seem to directly support this.
Thanks to all of you in advance!