To make it easier for you to start auditing the activities of users and
processes on your system, we have created example Auditbeat dashboards.
You loaded the dashboards earlier when you ran the
To open the dashboards, launch the Kibana web interface by pointing your browser
to port 5601. For example, http://localhost:5601.
localhost with the name of the Kibana host. If you’re using our
hosted Elasticsearch Service instance, log
in to your cloud account, then navigate to the Kibana endpoint in your
In the side navigation, click Discover. To see Auditbeat data, make sure
auditbeat-* index pattern is selected.
If you don’t see data in Kibana, try changing the date range to a larger range. By default, Kibana shows the last 15 minutes.
In the side navigation, click Dashboard, then select the dashboard that you want to open.
The dashboards are provided as examples. We recommend that you customize them to meet your needs.