Creating _all index pattern in Kibana

Elastic Stack Kibana
1

Hi,

I've created _all index pattern in kibana to search for logs across indexes.

1) So, creating _all index pattern would take extra disk space on ES nodes? 
2) And is it a good idea to create such index?

Please let me know if there are any underlying issues which could effect performance.

2

Hi @amruth,

What do you mean exactly? Do you mean you created indices within ES with the _all mapping field enabled

3

Hi Chris,

I am creating an index pattern in kibana(not in ES)

Thanks

4

How are you doing that exactly? As far as I'm aware, we do not have a concept of _all within Kibana itself - that concept is something that resides within ES.

Can you share some screenshots of what you have within Kibana?

5

image

Please refer this

6

Ah, I'd definitely recommend against that if you're using this for a production environment. It will affect Kibana and ES performance - any visualization/dashboard you load against this index pattern means that Kibana and ES both need to read/process every single index which can easily get out of control.

1 Like
7

Got you. Thanks Chris :slight_smile:

8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.