Creating _all index pattern in Kibana

amruth · July 13, 2018, 2:52pm

Hi,

I've created _all index pattern in kibana to search for logs across indexes.

1) So, creating _all index pattern would take extra disk space on ES nodes? 
2) And is it a good idea to create such index?

Please let me know if there are any underlying issues which could effect performance.

chrisronline · July 17, 2018, 1:15pm

Hi @amruth,

What do you mean exactly? Do you mean you created indices within ES with the _all mapping field enabled

amruth · July 17, 2018, 1:36pm

Hi Chris,

I am creating an index pattern in kibana(not in ES)

Thanks

chrisronline · July 17, 2018, 2:22pm

How are you doing that exactly? As far as I'm aware, we do not have a concept of _all within Kibana itself - that concept is something that resides within ES.

Can you share some screenshots of what you have within Kibana?

amruth · July 17, 2018, 3:09pm

Please refer this

chrisronline · July 17, 2018, 6:14pm

Ah, I'd definitely recommend against that if you're using this for a production environment. It will affect Kibana and ES performance - any visualization/dashboard you load against this index pattern means that Kibana and ES both need to read/process every single index which can easily get out of control.

amruth · July 23, 2018, 3:34pm

Got you. Thanks Chris

system · August 20, 2018, 3:34pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.