# How to view logs on evebox

**URL:** <https://forum.suricata.io/t/how-to-view-logs-on-evebox/4419>\
**Category:** Help\
**Tags:** community\
**Created:** [January 23, 2024, 5:47am UTC](https://forum.suricata.io/t/how-to-view-logs-on-evebox/4419 "2024-01-23T05:47:45Z")\
**Posts on this page:** 4\
**Page:** 2

<div class="post-metadata">

**Author:** ![ish](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/ish/32/8_2.png) [@ish](https://forum.suricata.io/u/ish)\
**Post date:** [March 22, 2024, 3:49pm UTC](https://forum.suricata.io/t/how-to-view-logs-on-evebox/4419/21 "2024-03-22T15:49:08Z")

</div>

Is there anything under the “Events” tab? How are you adding your Suricata events to Elasticsearch?

---

<div class="post-metadata">

**Author:** ![Le\_Sok](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/le_sok/32/2611_2.png) [@Le\_Sok](https://forum.suricata.io/u/Le_Sok)\
**Post date:** [March 25, 2024, 7:28am UTC](https://forum.suricata.io/t/how-to-view-logs-on-evebox/4419/22 "2024-03-25T07:28:57Z")

</div>

Event tab on Evebox is nothing,  
I try create Fleet server set my server IP  
 ![image](https://canada1.discourse-cdn.com/flex030/uploads/suricata/original/2X/c/c1adab0ef5f9d58c4dfeb9e3763210ffd77a2dbb.png)  
and I got this error

 ![image](https://canada1.discourse-cdn.com/flex030/uploads/suricata/original/2X/1/1818cbfebe505e4893b7d7187cb76b3c65e488c3.png)  
Before I can create it but after I uninstall I can’t create it anymore  
When I create it I set agent as suricata but I don’t get anylogs from suricata  
Does I do wrong way ro not sir  
Can u guide me the right way to add suricata events to Elasticsearch please.

---

<div class="post-metadata">

**Author:** ![Le\_Sok](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/le_sok/32/2611_2.png) [@Le\_Sok](https://forum.suricata.io/u/Le_Sok)\
**Post date:** [April 9, 2024, 7:55am UTC](https://forum.suricata.io/t/how-to-view-logs-on-evebox/4419/23 "2024-04-09T07:55:17Z")

</div>

I just configuration Elastic and Suricata already sir but evebox still can’t get logs from Elastic

 ![image](https://canada1.discourse-cdn.com/flex030/uploads/suricata/original/2X/6/6e5bc9c21207828f67141b635d9e463dd8abb588.png)  
 ![image](https://canada1.discourse-cdn.com/flex030/uploads/suricata/original/2X/9/917b3d62ab71a32ebcd98f7b466f5766d094034b.png)  
 ![image](https://canada1.discourse-cdn.com/flex030/uploads/suricata/original/2X/9/917b3d62ab71a32ebcd98f7b466f5766d094034b.png)  
I just add Elastic agent for suricata. Now I can view logs on Elastic but when I configuration evebox It’s still not get logs  
 ![image](https://canada1.discourse-cdn.com/flex030/uploads/suricata/original/2X/d/d77f639661e0ba432de644f86198581da1bb9183.png)  
Why it’s not get logs sir ?

---

<div class="post-metadata">

**Author:** ![ish](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/ish/32/8_2.png) [@ish](https://forum.suricata.io/u/ish)\
**Post date:** [April 9, 2024, 6:36pm UTC](https://forum.suricata.io/t/how-to-view-logs-on-evebox/4419/24 "2024-04-09T18:36:35Z")

</div>

How are you currently sending Suricata events to Elasticsearch?

[Previous page](https://forum.suricata.io/t/how-to-view-logs-on-evebox/4419.md?page=1)