xeraa/auditbeat-in-action

Visualization

Opened this issue · 1 comments

I want to create dashboard which will capture the log only from morning 10:00 Pm to evening 07:00 PM

xeraa commented

Generally I'd try to use the date picker for any such limitations. That can be relative or absolute:

Auditbeat Auditd  Overview ECS - Kibana 2019-08-20 22-28-01

Does that solve the question? But this is IMO more of a general Kibana question than specific to this repo.