The FailedTo dashboard is a simple Kibana topN
query on the failed_to
field. This field is created everytime logstash see something like “failed to do something“.
In the screenshot below, you may have noticed a lot of “Failed to write” which was actual SIOC alerts because of a storage issue.
This dashboard is embedded in SexiLog. If you want up-to-date version for your own platform, the Gist code for this dashboard is:
https://gist.github.com/sexibytes/742b92fd4fcafd472d61
More information about dashboard import in Kibana is available here