# Create a view from multiple index as kibana source

**URL:** https://discuss.elastic.co/t/create-a-view-from-multiple-index-as-kibana-source/251529
**Category:** Kibana
**Created:** [October 9, 2020, 6:11am UTC](https://discuss.elastic.co/t/create-a-view-from-multiple-index-as-kibana-source/251529 "2020-10-09T06:11:29Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![inhinyera16](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/inhinyera16/32/61625_2.png) [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)
#### Post date: [October 9, 2020, 6:11am UTC](https://discuss.elastic.co/t/create-a-view-from-multiple-index-as-kibana-source/251529/1 "2020-10-09T06:11:29Z")

</div>

Im planning to create a summary view of my filebeat and metricbeat indices with few selected field from each and use it as my visualization source in kibana. Is this possible?

---

<div class="post-metadata">

### Author: ![timroes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timroes/32/19712_2.png) [@timroes](https://discuss.elastic.co/u/timroes)
#### Post date: [October 9, 2020, 9:09am UTC](https://discuss.elastic.co/t/create-a-view-from-multiple-index-as-kibana-source/251529/2 "2020-10-09T09:09:07Z")

</div>

Hi Archelle,

yes this is possible. When creating an index pattern (under Stack Management \> Kibana \> Index Patterns), you can use wildcards and commas for using multiple indexes below, so you could create an index pattern for `metricbeat-*,filebeat-*` that would match all indexes begining with either of those.

Cheers,  
Tim

---

<div class="post-metadata">

### Author: ![inhinyera16](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/inhinyera16/32/61625_2.png) [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)
#### Post date: [October 12, 2020, 9:02am UTC](https://discuss.elastic.co/t/create-a-view-from-multiple-index-as-kibana-source/251529/3 "2020-10-12T09:02:02Z")

</div>

Thank you but it needs to reindex right? right now i need something like a view .. that doesnt require to reindex as i dont have any access to source data

---

<div class="post-metadata">

### Author: ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)
#### Post date: [October 12, 2020, 9:09am UTC](https://discuss.elastic.co/t/create-a-view-from-multiple-index-as-kibana-source/251529/4 "2020-10-12T09:09:15Z")

</div>

You won't need to reindex anything - index patterns in Kibana are just a "selector" (or pointer) for your data in Elasticsearch. It's simply telling Elasticsearch which indices to consider when queries are sent.

---

<div class="post-metadata">

### Author: ![inhinyera16](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/inhinyera16/32/61625_2.png) [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)
#### Post date: [October 12, 2020, 9:35am UTC](https://discuss.elastic.co/t/create-a-view-from-multiple-index-as-kibana-source/251529/5 "2020-10-12T09:35:32Z")

</div>

ok, so how do i select which fields only to include in index pattern? bcoz i need to filter out only the main fields like agent.hostname, system.cpu etc

---

<div class="post-metadata">

### Author: ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)
#### Post date: [October 12, 2020, 10:05am UTC](https://discuss.elastic.co/t/create-a-view-from-multiple-index-as-kibana-source/251529/6 "2020-10-12T10:05:50Z")

</div>

You can select them when creating your charts - them showing up in the index pattern isn't having any effect (like worse performance and so on)

---

<div class="post-metadata">

### Author: ![inhinyera16](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/inhinyera16/32/61625_2.png) [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)
#### Post date: [October 12, 2020, 10:12am UTC](https://discuss.elastic.co/t/create-a-view-from-multiple-index-as-kibana-source/251529/7 "2020-10-12T10:12:00Z")

</div>

not gonna work in my local machine haha. combining metricbeat and filebeat is making an index pattern with more that 7k fields, and i only need more or less 10 fields.

---

<div class="post-metadata">

### Author: ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)
#### Post date: [October 12, 2020, 11:02am UTC](https://discuss.elastic.co/t/create-a-view-from-multiple-index-as-kibana-source/251529/8 "2020-10-12T11:02:58Z")

</div>

What issue are you running into with the 7k fields index?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 9, 2020, 11:02am UTC](https://discuss.elastic.co/t/create-a-view-from-multiple-index-as-kibana-source/251529/9 "2020-11-09T11:02:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
