---
title: Load Kibana dashboards
description: Filebeat comes packaged with example Kibana dashboards, visualizations, and searches for visualizing Filebeat data in Kibana. Before you can use the dashboards,...
url: https://www.elastic.co/elastic/docs-builder/assembled-docs/2379/reference/beats/filebeat/load-kibana-dashboards
---

# Load Kibana dashboards
<tip>
  For deeper observability into your infrastructure, you can use the Metrics app and the Logs app in Kibana. For more details, see [Metrics monitoring](https://docs-v3-preview.elastic.dev/elastic/docs-builder/assembled-docs/2379/solutions/observability/infra-and-hosts/analyze-infrastructure-host-metrics) and [Log monitoring](https://docs-v3-preview.elastic.dev/elastic/docs-builder/assembled-docs/2379/solutions/observability/logs/explore-logs).
</tip>

Filebeat comes packaged with example Kibana dashboards, visualizations, and searches for visualizing Filebeat data in Kibana. Before you can use the dashboards, you need to create the index pattern, `filebeat-*`, and load the dashboards into Kibana.
To do this, you can either run the `setup` command (as described here) or [configure dashboard loading](https://www.elastic.co/elastic/docs-builder/assembled-docs/2379/reference/beats/filebeat/configuration-dashboards) in the `filebeat.yml` config file. This requires a Kibana endpoint configuration. If you didn’t already configure a Kibana endpoint, see [Kibana endpoint](https://www.elastic.co/elastic/docs-builder/assembled-docs/2379/reference/beats/filebeat/setup-kibana-endpoint).

## Load dashboards

Make sure Kibana is running before you perform this step. If you are accessing a secured Kibana instance, make sure you’ve configured credentials as described in the [Quick start: installation and configuration](https://www.elastic.co/elastic/docs-builder/assembled-docs/2379/reference/beats/filebeat/filebeat-installation-configuration).
To load the recommended index template for writing to Elasticsearch and deploy the sample dashboards for visualizing the data in Kibana, use the command that works with your system.
<tab-set>
  <tab-item title="DEB">
    ```sh
    filebeat setup --dashboards
    ```
  </tab-item>

  <tab-item title="RPM">
    ```sh
    filebeat setup --dashboards
    ```
  </tab-item>

  <tab-item title="MacOS">
    ```sh
    ./filebeat setup --dashboards
    ```
  </tab-item>

  <tab-item title="Linux">
    ```sh
    ./filebeat setup --dashboards
    ```
  </tab-item>

  <tab-item title="Docker">
    ```sh
    docker run --rm --net="host" docker.elastic.co/beats/filebeat:9.2.2 setup --dashboards
    ```
  </tab-item>

  <tab-item title="Windows">
    Open a PowerShell prompt as an Administrator (right-click the PowerShell icon and select **Run As Administrator**).From the PowerShell prompt, change to the directory where you installed Filebeat, and run:
    ```sh
    PS > .\filebeat.exe setup --dashboards
    ```
  </tab-item>
</tab-set>

For more options, such as loading customized dashboards, see [Importing Existing Beat Dashboards](http://www.elastic.co/guide/en/beats/devguide/master/import-dashboards.md). If you’ve configured the Logstash output, see [Load dashboards for Logstash output](#load-dashboards-logstash).

## Load dashboards for Logstash output

During dashboard loading, Filebeat connects to Elasticsearch to check version information. To load dashboards when the Logstash output is enabled, you need to temporarily disable the Logstash output and enable Elasticsearch. To connect to a secured Elasticsearch cluster, you also need to pass Elasticsearch credentials.
<tip>
  The example shows a hard-coded password, but you should store sensitive values in the [secrets keystore](https://www.elastic.co/elastic/docs-builder/assembled-docs/2379/reference/beats/filebeat/keystore).
</tip>

<tab-set>
  <tab-item title="DEB">
    ```sh
    filebeat setup -e \
      -E output.logstash.enabled=false \
      -E output.elasticsearch.hosts=['localhost:9200'] \
      -E output.elasticsearch.username=filebeat_internal \
      -E output.elasticsearch.password=YOUR_PASSWORD \
      -E setup.kibana.host=localhost:5601
    ```
  </tab-item>

  <tab-item title="RPM">
    ```sh
    filebeat setup -e \
      -E output.logstash.enabled=false \
      -E output.elasticsearch.hosts=['localhost:9200'] \
      -E output.elasticsearch.username=filebeat_internal \
      -E output.elasticsearch.password=YOUR_PASSWORD \
      -E setup.kibana.host=localhost:5601
    ```
  </tab-item>

  <tab-item title="MacOS">
    ```sh
    ./filebeat setup -e \
      -E output.logstash.enabled=false \
      -E output.elasticsearch.hosts=['localhost:9200'] \
      -E output.elasticsearch.username=filebeat_internal \
      -E output.elasticsearch.password=YOUR_PASSWORD \
      -E setup.kibana.host=localhost:5601
    ```
  </tab-item>

  <tab-item title="Linux">
    ```sh
    ./filebeat setup -e \
      -E output.logstash.enabled=false \
      -E output.elasticsearch.hosts=['localhost:9200'] \
      -E output.elasticsearch.username=filebeat_internal \
      -E output.elasticsearch.password=YOUR_PASSWORD \
      -E setup.kibana.host=localhost:5601
    ```
  </tab-item>

  <tab-item title="Docker">
    ```sh
    docker run --rm --net="host" docker.elastic.co/beats/filebeat:9.2.2 setup -e \
      -E output.logstash.enabled=false \
      -E output.elasticsearch.hosts=['localhost:9200'] \
      -E output.elasticsearch.username=filebeat_internal \
      -E output.elasticsearch.password=YOUR_PASSWORD \
      -E setup.kibana.host=localhost:5601
    ```
  </tab-item>

  <tab-item title="Windows">
    Open a PowerShell prompt as an Administrator (right-click the PowerShell icon and select **Run As Administrator**).From the PowerShell prompt, change to the directory where you installed Filebeat, and run:
    ```sh
    PS > .\filebeat.exe setup -e `
      -E output.logstash.enabled=false `
      -E output.elasticsearch.hosts=['localhost:9200'] `
      -E output.elasticsearch.username=filebeat_internal `
      -E output.elasticsearch.password=YOUR_PASSWORD `
      -E setup.kibana.host=localhost:5601
    ```
  </tab-item>
</tab-set>