diff --git a/README.md b/README.md index e28d9b0..baa15b5 100644 --- a/README.md +++ b/README.md @@ -152,5 +152,16 @@ Start the Elasticsearch with filebeat container: sudo docker-compose up -d elasticsearch filebeat kibana ``` -You can see your logs in `filebeat-*` index on Elasticsearch: -[Todo screenshots] +Create a new index for filebeat. + +```Stack Management -> Index Patterns -> Create new pattern.``` + +![Kibana Index Patterns](./images/kibana_management_filebeat.png) + +Enter index pattern name `filebeat-*` and select `@timestamp` as the time field. + +![New Index Pattern](./images/kibana_new_index_filebeat.png) + +You can view your logs in `filebeat-*` index in the Discover section. + +![Filebeat Index Pattern](./images/kibana_index_dropdown_filebeat.png) \ No newline at end of file diff --git a/images/kibana_index_dropdown_filebeat.png b/images/kibana_index_dropdown_filebeat.png new file mode 100644 index 0000000..8c6bde4 Binary files /dev/null and b/images/kibana_index_dropdown_filebeat.png differ diff --git a/images/kibana_management_filebeat.png b/images/kibana_management_filebeat.png new file mode 100644 index 0000000..ff70bc5 Binary files /dev/null and b/images/kibana_management_filebeat.png differ diff --git a/images/kibana_new_index_filebeat.png b/images/kibana_new_index_filebeat.png new file mode 100644 index 0000000..4cc6b16 Binary files /dev/null and b/images/kibana_new_index_filebeat.png differ