WARNING: Version 6.0 of Filebeat has passed its EOL date.
This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.
Filebeat comes packaged with example Kibana dashboards, visualizations,
and searches for visualizing Filebeat data in Kibana. Before you can use
the dashboards, you need to create the index pattern,
load the dashboards into Kibana. To do this, you can either run the
command (as described here) or
configure dashboard loading in the
filebeat.yml config file.
Starting with Beats 6.0.0, the dashboards are loaded via the Kibana API. This requires a Kibana endpoint configuration. You should have configured the endpoint earlier when you configured Filebeat. If you didn’t, configure it now.
Make sure Kibana is running before you perform this step. If you are accessing a secured Kibana instance, make sure you’ve configured credentials as described in Step 2: Configure Filebeat.
To set up the Kibana dashboards for Filebeat:
deb, rpm, and mac:
From the directory where you installed Filebeat, run:
./filebeat setup --dashboards
docker run docker.elastic.co/beats/filebeat:6.0.1 setup --dashboards
Open a PowerShell prompt as an Administrator (right-click the PowerShell icon and select Run As Administrator). If you are running Windows XP, you may need to download and install PowerShell.
From the PowerShell prompt, change to the directory where you installed Filebeat, and run:
PS > filebeat setup --dashboards