# Change index of saved searches

**URL:** <https://discuss.elastic.co/t/change-index-of-saved-searches/155844>\
**Category:** Kibana\
**Created:** [November 8, 2018, 9:00am UTC](https://discuss.elastic.co/t/change-index-of-saved-searches/155844 "2018-11-08T09:00:19Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ludovic9](https://avatars.discourse-cdn.com/v4/letter/l/977dab/32.png) [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\
**Post date:** [November 8, 2018, 9:00am UTC](https://discuss.elastic.co/t/change-index-of-saved-searches/155844/1 "2018-11-08T09:00:19Z")

</div>

Hi,  
I'm using filebeat to send logs from Filezilla server to ELK server. It's working, and the default index is _filebeat-6.3.0-YYYY.mm.dd_

I want to change that because more logs with filebeat will be sent and i don't want to mix differents logs application in one index.

So I have used redindex API to copy all indices in new indices ( _filebeat-6.3.0-YYYY.mm.dd_ to _filezilla-logs-YYYY.mm.dd_)

When I change the source of a saved searched to have the informations from the new indices, I have a error message :

```auto
Could not locate that index-pattern (id: filezilla-logs-*),

```

But this pattern exisits, I have created this once I have renamed the indices.

I don't undestand what's wrong.

I have also created a new search from the new index and I saved it. When I read it, the index is a serial number : _2a61ec40-e2a2-11e8-a38e-69b7fe5aaa9d_

Why it's not the same name as the index pattern ?

Fo winlogbeat or heartbeat, it's not a serial number.

So how I can have the saved searches with the new indices pattern without to recreated them from scratch ?

Thank you for your help.

---

<div class="post-metadata">

**Author:** ![Ludovic9](https://avatars.discourse-cdn.com/v4/letter/l/977dab/32.png) [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\
**Post date:** [November 8, 2018, 4:58pm UTC](https://discuss.elastic.co/t/change-index-of-saved-searches/155844/2 "2018-11-08T16:58:38Z")

</div>

I have understood the problem.

When I have created the index pattern, I have not specified a custom pattern ID.

So I have deleted and created again my index patter with a custom pattern, it's OK, no error with the saved search.

The strange thing, I don't understand why my saved searches are not working when I choose the new index pattern.

---

<div class="post-metadata">

**Author:** ![Joe\_Fleming](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joe_fleming/32/3561_2.png) [@Joe\_Fleming](https://discuss.elastic.co/u/Joe_Fleming)\
**Post date:** [November 8, 2018, 6:41pm UTC](https://discuss.elastic.co/t/change-index-of-saved-searches/155844/3 "2018-11-08T18:41:42Z")

</div>

They're all bound to the index pattern by the pattern's uniq (internal) id, not by the name of the index pattern. You'll have to either recreate your saved searches, or edit them in Management \> Saved Objects to point to the new index pattern's id (which you can also find in that same interface).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 6, 2018, 6:41pm UTC](https://discuss.elastic.co/t/change-index-of-saved-searches/155844/4 "2018-12-06T18:41:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.