Deploy a Kibana dashboard

What is a Kibana dashboard?

A Kibana dashboard is an Elastic product that displays a full picture of your Elasticsearch data. EPM Cloud for Linux includes a default dashboard you can deploy to your Kibana instance.

How is a Kibana dashboard useful to my organization?

If your organization uses Elasticsearch as a SEIM connection, the Kibana dashboard provides visualizations of events for a number of BeyondTrust products including EPM Cloud for Linux policy events. Connections using CloudID can identify the location to deploy the Kibana dashboard.

Prerequisites

You must have the following configured prior to deploying a Kibana dashboard from EPM Cloud for Linux.

• A configured Elasticsearch SEIM connection in EPM Cloud for Linux that connects to your Elasticsearch instance using a CloudID
• A Kibana instance associated with your Elasticsearch instance.

Deploy a Kibana dashboard using EPM Cloud for Linux

1. Click > Endpoint Privilege Management for Linux > SEIM Connections.
   The SEIM Connections page displays.
2. Locate your configured Elasticsearch SEIM connection from the list.
3. Click the SEIM connection name.
   The Edit SEIM Connection page displays.
4. Modify the connection Name, URL, certificate verification check, and any of the connection details.
5. Click Deploy Dashboard.
   The dashboard deploys from EPM Cloud for Linux, and you can view it in your Kibana instance.