Displaying the Metron Error Dashboard
Prior to displaying the Metron Error Dashboard, ensure that you have created an index template. See Creating an Index template for more information.
To display the error dashboard, you must navigate to it from the main Metron dashboard:
In the main Metron dashboard, click (load saved dashboard) in the upper right corner of the Metron dashboard.
Select Metron Error Dashboard from the list of dashboards.
Click (timeframe tab) in the upper right corner of the Metron Error Dashboard and choose the timeframe you want to use.
The Metron Error dashboard receives the following information for all error messages:
Exception
Hostname - The machine on which the error occurred
Stack trace
Time - When the error occurred
Message
Raw Message - Original message
Raw_message_bytes - The bytes of the original message
Hash - Determines if there is a duplicate message
Source_type - Identifies source sensor
Error type - Defines the error type; for example parser error