- Auditbeat Reference: other versions:
- Overview
- Getting started with Auditbeat
- Breaking changes in 6.2
- Setting up and running Auditbeat
- Configuring Auditbeat
- Specify which modules to run
- Specify general settings
- Reload the configuration dynamically
- Configure the internal queue
- Configure the output
- Specify SSL settings
- Filter and enhance the exported data
- Parse data by using ingest node
- Set up project paths
- Set up the Kibana endpoint
- Load the Kibana dashboards
- Load the Elasticsearch index template
- Configure logging
- Use environment variables in the configuration
- YAML tips and gotchas
- Regular expression support
- HTTP Endpoint
- auditbeat.reference.yml
- Modules
- Exported fields
- Monitoring Auditbeat
- Securing Auditbeat
- Troubleshooting
- Contributing to Beats
Step 6: View the sample Kibana dashboards
editStep 6: View the sample Kibana dashboards
editTo make it easier for you to start auditing the activities of users and
processes on your system, we have created example Auditbeat dashboards.
You loaded the dashboards earlier when you ran the setup command.
To open the dashboards, launch the Kibana web interface by pointing your browser
to port 5601. For example, http://localhost:5601.
Replace localhost with the name of the Kibana host. If you’re using an
Elastic Cloud instance, log in to your cloud account,
then navigate to the Kibana endpoint in your deployment.
On the Discover page, make sure that the predefined auditbeat-* index
pattern is selected to see Auditbeat data.
Go to the Dashboard page and select the dashboard that you want to open.
If you don’t see data in Kibana, try changing the date range to a larger range. By default, Kibana shows the last 15 minutes.
The dashboards are provided as examples. We recommend that you customize them to meet your needs.
