the goal is to link bro log with kibana,
when I open tab discover I will have as result
but for dashboard and vizualization I have nothing
but for dashboard and vizualization I have nothing
First off, have you created the visualizations and dashboards and are they query-able for the given time period? Have you checked if you are within the time period when you are in the dashboard and visualization tabs to get them ? Can you please explain your questions more elaborately ?
Thanks
Rashmi
i had add an file json of dashboard and vizualisation and i had configure filebeat to transform bro logs to elk when i try to see dashboard and vizualisation tab i have as output :
Can you please check the logs as well ? Is there anything there? So I gather that you are not able to import the json dashboard. More information would be helpful.
Cheers
Rashmi
you can refer to this post when i had explain in more detail the problem
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.