hello,
I imported syslogs from RSYSLOG server with filebeat.
I can see logs on discover with the filter : filebeat-* ; and on Observability > logs Stream.
I Can't use dashboard : Syslog events by hostname [Filebeat System] ECS ; [logs System] Syslog dashboard and any dashboard.
No result founds.
When i try to explore on discover from dashboard, No entry found. I dont understand...
I tried to create a dashboard and display syslogs there's not much more I can do. I really would like to use syslogs dashboard... Help plz.
Thx in adavance.