This functionality is experimental and may be changed or removed completely in a future release. Elastic will take a best effort approach to fix any issues, but experimental features are not subject to the support SLA of official GA features.
« Step 5: Start Journalbeat Repositories for APT and YUM »
Elastic Docs ›Journalbeat Reference [7.7] ›Get started with Journalbeat

Step 6: Explore your data in Kibana

edit

Step 6: Explore your data in Kibana

edit

The Journalbeat dashboard is currently broken. To start exploring your data, go to the Discover application in Kibana. From there, you can submit search queries, filter the search results, and view document data.

To learn how to build visualizations and dashboards to view your data, see the Kibana User Guide.

Want to tail logs in real time?

edit

Use the Logs app in Kibana. For more details, see the Logs Monitoring Guide.

The Logs app shows logs from filebeat-* indices by default. To show Journalbeat indices, configure the source to include journalbeat-*. You can do this in the Logs app when you configure the source, or you can modify the Kibana configuration. For example:

xpack.infra:
 sources:
   default:
     logAlias: "filebeat-*,journalbeat-*"
« Step 5: Start Journalbeat Repositories for APT and YUM »