Kibana is a web interface for searching and exploring structured log documents stored in Elasticsearch. In a containerized logging stack, Fluentd collects and enriches container logs before forwarding them to Elasticsearch, while Kibana provides the user-facing search experience. section 19.3 section 19.5
Use Kibana to inspect container logs as follows:
- Start the Fluentd, Elasticsearch, and Kibana services with Docker Compose, then run a container configured with Docker’s Fluentd logging driver. section 19.3
- Open Kibana at http://localhost:5601/app/discover and choose Create Data View. section 19.3
- Set the data-view name to logs, use fluentd* as the index pattern, and select @timestamp as the timestamp field. section 19.3
- Save the data view to open Discover, where collected records can be searched and filtered by their fields. section 19.3
Inspecting container logs
A timecheck container sends logs through Fluentd to Elasticsearch. Kibana then exposes those records in Discover, including metadata such as the originating container ID and name; differing fields are supported because Elasticsearch stores structured documents without a fixed database schema. section 19.3
