Viewing Logs Separately in Security Onion and Monitoring Best Practices

[SankaGamage]

Hi everyone,

I’ve installed Security Onion using the distributed method and have set up two separate forward nodes. Now, I want to achieve the following:

1. Separate Log Views:

• How can I view logs from each forward node separately using Kibana or alerts or any other method?
• Are there specific configurations or dashboards available to help achieve this?

I would greatly appreciate any advice, guidance, or examples to help with these questions.

Thanks in advance for your help!