Lab 4.2: Auditbeat with Logstash

Use search to see if you can find your nano process starting and stopping

• Submit Screenshot
  

Use curl to query for the nano record. Can you search based on filename you created?

• Submit Screenshot
  

Find the relevant log info and

• Submit screenshot