Lab 3.2: Configuring Filebeat

In the side navigation, click Discover. To see filebeat data, make sure the predefined filebeat- index pattern is selected*. You should see logs from the filebeat Agent showing up.
Submit Screenshot

Find one relevant to Apache

• Submit Screenshot
  

Find one relevant to System

• Submit Screenshot
  

Click on the Search bar and explore options to find the successful and failed SSH logins.

• Create a search filter that displays log results for failed logins
  • Submit Screenshot

Create another search filter that lets you find the apache logs from your browser connections based on your workstation IP
* Submit Screenshot

Go back to Dashboard

• Find a Dashboard that displays details on the SSH logins
  • Submit Screenshot