IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« Step 5: Start Auditbeat Repositories for APT and YUM »
Elastic Docs ›Auditbeat Reference [7.3] ›Getting started with Auditbeat

Step 6: View the sample Kibana dashboards

edit

Step 6: View the sample Kibana dashboards

edit

To make it easier for you to start auditing the activities of users and processes on your system, we have created example Auditbeat dashboards. You loaded the dashboards earlier when you ran the setup command.

To open the dashboards, launch the Kibana web interface by pointing your browser to port 5601. For example, http://localhost:5601. Replace localhost with the name of the Kibana host. If you’re using an Elastic Cloud instance, log in to your cloud account, then navigate to the Kibana endpoint in your deployment.

On the Discover page, make sure that the predefined auditbeat-* index pattern is selected to see Auditbeat data.

Discover tab with index selected

If you don’t see data in Kibana, try changing the date range to a larger range. By default, Kibana shows the last 15 minutes.

Go to the Dashboard page and select the dashboard that you want to open.

Navigation widget in Kibana

The dashboards are provided as examples. We recommend that you customize them to meet your needs.

Auditbeat File Integrity Dashboard
« Step 5: Start Auditbeat Repositories for APT and YUM »