Run Book
Also available as:
PDF

Reviewing the New Data Source Data

Now that the Metron dashboard is aware of the new data source index, you can look at the data.

  1. Display the Metron dashboard.

  2. Click on the Discover tab and then choose the newly created data source index pattern.

  3. Click any of the fields in the left column to see a representation of the variety of data for that specific field.

  4. Click the Right Facing Arrow icon next to a specific record in the center of the window (the Document table) to expand the record and display the available data.

Figure 2.18. Discover Tab with Squid Elements