The logging analytics stack (Elasticsearch, Logstash, Kibana) is provided as part of the OOM deployment via the component log.
LOG-134 - Getting issue details... STATUS
LOG-152 - Getting issue details... STATUS
The frontend UI, Kibana, can be accessed from a web browser on the port 30253:
In your browser navigate to <vm-ip-address>:30253
You will see the follow screen to configure your index pattern:
Enter the following, and click 'Create':
Next select 'Saved Objects' from the top menu:
Select 'Import':
Download, and select the following file to import:
If this is a new deployment, at prompt, you can select 'Yes, overwrite all'
Note that depending on the log data that has been processed in your environment you may get some errors importing some of the visualizations. This is because the schema in elasticsearch is determined dynamically based on the data that has been processed. If no data has been processed with fields that are specified in certain visualizations they will error on the import. These errors can be ignored and visualizations can be reimported at a later time when the data is available. If problems persist try refreshing the index pattern.
You should see 3 Dashboards, 2 Searches, and 8 Visualizations imported:
To view any dashboard, click the Dashboard icon on the side menu, and click the dashboard of interest:
Select the date range of interest using the date picker. If no data is visible it is likely that there is no data for the selected range:
The 'Discover' page provides a view to see and search the processed log data:
For for information on using Kibana, refer to the user guide:
https://www.elastic.co/guide/en/kibana/6.1/index.html