Auditbeat comes packaged with example Kibana dashboards, visualizations,
and searches for visualizing Auditbeat data in Kibana. Before you can use
the dashboards, you need to create the index pattern,
load the dashboards into Kibana. To do this, you can either run the
command (as described here) or
configure dashboard loading in the
auditbeat.yml config file.
This requires a Kibana endpoint configuration. If you didn’t already configure a Kibana endpoint, see configured Auditbeat
Make sure Kibana is running before you perform this step. If you are accessing a secured Kibana instance, make sure you’ve configured credentials as described in Step 2: Configure Auditbeat.
To set up the Kibana dashboards for Auditbeat, use the appropriate command for your system.
deb and rpm:
auditbeat setup --dashboards
./auditbeat setup --dashboards
Open a PowerShell prompt as an Administrator (right-click the PowerShell icon and select Run As Administrator). If you are running Windows XP, you may need to download and install PowerShell.
From the PowerShell prompt, change to the directory where you installed Auditbeat, and run:
PS > auditbeat setup --dashboards