Hi. Just setup my windows 2012 server to send eventlogs to ES (via winlogbeat and LS).
I also uploaded the dashboard as per document here -
Now from within Kibana when I go to the winlogbeat dashboard I see this message on the top and the main window doesn't show as much info as I am use to in the past with previous versions.
"Visualize: Fielddata is disabled on text fields by default. Set fielddata=true on [log_name] in order to load fielddata in memory by uninverting the inverted index. Note that this can however use significant memory."
Not sure if this is related but I believe I need to load the template manually if I am using LS (which I am)
But it looks like it's missing some info?
Any assistance that anybody can give will be appreciated. TIA.