Logs

edit

This functionality is in beta and is subject to change. The design and code is less mature than official GA features and is being provided as-is with no warranties. Beta features are not subject to the support SLA of official GA features.

Use the Logs UI to explore logs for common servers, containers, and services. Kibana provides a compact, console-like display that you can customize.

Log Console in Kibana

Add data sources

edit

Kibana provides step-by-step instructions to help you add your data sources. The Infrastructure Monitoring Guide is a good source for more detailed information and instructions.

Configure data sources

edit

By default the Logs UI uses the filebeat-* index pattern to query the data. If your logs are located in a different set of indices, you will need to set xpack.infra.sources.default.logAlias in config/kibana.yml to match your log’s index pattern. You can also configure the timestamp field by overriding xpack.infra.sources.default.fields.timestamp, by default it is set to @timestamp. See Logs UI Settings for a complete list.