auditbeat-in-action icon indicating copy to clipboard operation
auditbeat-in-action copied to clipboard

Visualization

Open shailesh9820 opened this issue 6 years ago • 1 comments

I want to create dashboard which will capture the log only from morning 10:00 Pm to evening 07:00 PM

shailesh9820 avatar Aug 20 '19 18:08 shailesh9820

Generally I'd try to use the date picker for any such limitations. That can be relative or absolute:

Auditbeat Auditd  Overview ECS - Kibana 2019-08-20 22-28-01

Does that solve the question? But this is IMO more of a general Kibana question than specific to this repo.

xeraa avatar Aug 20 '19 20:08 xeraa