Change default view in "Discover"

[KaWa (Kai)]

Hi,

I'd like to change the default view in "Analytics --> Discover" from "alerts-security.alerts-default,....,-elastic-cloud-logs-" to "logs-*".
How can one do this?

Thanks in advance
Kai

--
Version: 8.15.1

[jughosta (Julia Rechkunova)]

Hi @KaWa,
Welcome to the community!

There is an option to define a default data view on Advanced Settings page. The setting is called defaultIndex and it accepts a data view ID.

Once configured, it would preselect this data view when navigating to /app/discover.

[KaWa (Kai)]

Thank you, @jughosta for the quick reply.

With the option given, I change the default view for every user in the system, right?

Can I change it individually for each colleague or team? Like "security team likes alerts", "IT team likes logs", ...

Thank you.

[jughosta (Julia Rechkunova)]

If you give access only to certain Spaces and define the setting per Space then it would work Spaces | Kibana Guide [8.15] | Elastic

[KaWa (Kai)]

Thank you!

I'll try that.