# How to view logs on evebox

**URL:** <https://forum.suricata.io/t/how-to-view-logs-on-evebox/4419>\
**Category:** Help\
**Tags:** community\
**Created:** [January 23, 2024, 5:47am UTC](https://forum.suricata.io/t/how-to-view-logs-on-evebox/4419 "2024-01-23T05:47:45Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![ish](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/ish/32/8_2.png) [@ish](https://forum.suricata.io/u/ish)\
**Post date:** [January 28, 2024, 6:09pm UTC](https://forum.suricata.io/t/how-to-view-logs-on-evebox/4419/5 "2024-01-28T18:09:40Z")

</div>

I’ll assume you don’t have Elasticsearch and such up and running already? EveBox was initially built to “just work” in that scenario, but it can also work without Elasticsearch. I’m going to assume you are running EveBox on the same machine as Suricata, so you could do something like:

```auto
mkdir ~/.config/evebox
evebox server --datastore sqlite -D ~/.config/evebox --host 0.0.0.0 /var/log/suricata/eve.json

```

This will use SQLite and consume the Suricata events from `/var/log/suricata/eve.json`. You can view the events and alerts with a browser, [http://your-server-ip-here:5636](http://your-server-ip-here:5636).

Authentication, TLS can all be added, but for that, please see the EveBox docs.

---

_[View the full topic](https://forum.suricata.io/t/how-to-view-logs-on-evebox/4419)._
