I installed and configured ELK in order to conveniently visualize logs, namely the possibility of parallel tracking of client-server application logs.
that is, it’s interesting what the client sent, what the server got, and where in their exchange problems arise.

For example, in the log from the client there is a host field, and in the log from the clientHost server, the client’s host is being exchanged.I would like to link what would be the output in the form of a table of sent data, but with a nested table, where the server answers would be indicated.

It’s not possible to make the connection through Discover->search - I don’t see such functionality as, for example, in graphs().
Ie the data table functionality is needed but without aggregation.Is it possible?

I also do not see the possibility to set the data refresh interval on the dash board(preferably instantly)

0 Answers 0