Creating _all index pattern in Kibana


I've created _all index pattern in kibana to search for logs across indexes.

1) So, creating _all index pattern would take extra disk space on ES nodes? 
2) And is it a good idea to create such index? 

Please let me know if there are any underlying issues which could effect performance.

Hi @amruth,

What do you mean exactly? Do you mean you created indices within ES with the _all mapping field enabled

Hi Chris,

I am creating an index pattern in kibana(not in ES)


How are you doing that exactly? As far as I'm aware, we do not have a concept of _all within Kibana itself - that concept is something that resides within ES.

Can you share some screenshots of what you have within Kibana?


Please refer this

Ah, I'd definitely recommend against that if you're using this for a production environment. It will affect Kibana and ES performance - any visualization/dashboard you load against this index pattern means that Kibana and ES both need to read/process every single index which can easily get out of control.

1 Like

Got you. Thanks Chris :slight_smile:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.