# Why are my users complaining about the Kibana "Logs" application?

**URL:** https://discuss.elastic.co/t/why-are-my-users-complaining-about-the-kibana-logs-application/288160
**Category:** Kibana
**Created:** [November 1, 2021, 4:05pm UTC](https://discuss.elastic.co/t/why-are-my-users-complaining-about-the-kibana-logs-application/288160 "2021-11-01T16:05:20Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![cotjoey](https://avatars.discourse-cdn.com/v4/letter/c/76d3ee/32.png) [@cotjoey](https://discuss.elastic.co/u/cotjoey)
#### Post date: [November 1, 2021, 4:05pm UTC](https://discuss.elastic.co/t/why-are-my-users-complaining-about-the-kibana-logs-application/288160/1 "2021-11-01T16:05:20Z")

</div>

Hello,

I've implemented filebeat a while ago and started to send log events to Logstash to be inserted into Elasticsearch for viewing in Kibana. Ever since , people (Users of Kibana Logs) have been complaining about it's usability, how clunky it is, the stream process needs to be turned off and on again before it kicks in, filters don't always work, etc.

Now people are asking for "the good old way" to look at logs which is an HTTP server with the "application.log" files served in the browser.

I don't believe it was the intention of the Kibana Logs application to scare people away, so I am asking if there is something I could do differently to make my users like and adopt the Kibana Logs application?

If there is anybody out there that has the same bad experience and has some magic steps to make this work for everyone, I am open to suggestions.

Thank you,  
Joey

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [November 1, 2021, 10:56pm UTC](https://discuss.elastic.co/t/why-are-my-users-complaining-about-the-kibana-logs-application/288160/2 "2021-11-01T22:56:37Z")

</div>

Just to be clear, you are talking about [Observability | Kibana Guide [7.15] | Elastic](https://www.elastic.co/guide/en/kibana/current/observability.html#logs-app)?

How exactly are your users using this?

---

<div class="post-metadata">

### Author: ![cotjoey](https://avatars.discourse-cdn.com/v4/letter/c/76d3ee/32.png) [@cotjoey](https://discuss.elastic.co/u/cotjoey)
#### Post date: [November 2, 2021, 12:54pm UTC](https://discuss.elastic.co/t/why-are-my-users-complaining-about-the-kibana-logs-application/288160/3 "2021-11-02T12:54:26Z")

</div>

Yes, I am talking about the observability Logs app in Kibana (v7.10.0).

My users have an account to log into Kibana, they click on the Logs app in the left menu. It opens in the "Stream" view automatically. They then try to search by different tags in the search bar. Those logs are shipped by filebeat (v7.10.0) on the source host to Logstash, and Logstash stores in Elasticsearch after applying filters (or not).

Do you think the problem finding logs events comes down to training people to use the appropriate search tags for their application? I am trying to facilitate the shift from using the logs served over HTTP to Kibana, and it's not going well. They prefer the "old way". Maybe Elasticsearch offers other dashboards the are more intuitive to use by my users, or 3rd party tools that have a tie into Elasticsearch and have a better presentation layer, etc.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [November 2, 2021, 8:51pm UTC](https://discuss.elastic.co/t/why-are-my-users-complaining-about-the-kibana-logs-application/288160/4 "2021-11-02T20:51:55Z")

</div>

> [@cotjoey](#):
>
> Do you think the problem finding logs events comes down to training people to use the appropriate search tags for their application

Most likely. Change is hard after all, and people get comfy with things they know.

> [@cotjoey](#):
>
> I am trying to facilitate the shift from using the logs served over HTTP to Kibana

So a different web based UI? What's missing from the Logs UI that this has?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 30, 2021, 8:52pm UTC](https://discuss.elastic.co/t/why-are-my-users-complaining-about-the-kibana-logs-application/288160/5 "2021-11-30T20:52:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
