Creating a Kibana Dashboard for our CloudTrail logs

Now that our CloudTrail logs are streamed into ElasticSearch, we can really search through CloudTrail logs. In addition, we can create a dashboard to highlight some of the important events occurring on the AWS account.

To illustrate this point, we will simulate login attempts. Log out and log in a few times to the AWS console. Try also to log in using a wrong password to generate login failures in the logs.

Wait a few minutes for the data to be generated and sent to ElasticSearch, then go through the following steps to create a new index pattern:

  1. Open Kibana in your browser and go to the management menu.
  2. Click on Index Patterns.
  3. Click on Add New.
  4. In the Index name or pattern, give the name ...

Get Effective DevOps with AWS now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.