I have created a web based front end to my data set. My front end program extracts the data and inserts it into ELK via logstash. I then want to create a visualization followed by dashboards via saved_objects REST API.
When logstash completes, there is an index shown in Elasticsearch Index Management panel. There is no index shown in the Kibana Index Patterns panel. i.e. one must be created manually. This involves selecting the index by name and then assigning a time field (normally @timestamp).
If you do a GET REST operation after logstash completes (either by curl or Postman) you get back:
curl -X GET "http://localhost:5601/api/saved_objects/_find?type=index-pattern&search_fields=title&search=*" -H 'kbn-xsrf: true' -H 'Content-Type: application/json'
returns
{
"page": 1,
"per_page": 20,
"total": 0,
"saved_objects":
}
Once you create the index via Kibana Index Pattern manually, you get back the proper JSON.
Question: What is the Kibana REST API that needs to be used to create an kibana index from logstash ? Keep in mind that the only an ID gets created is after the manual kibana process.
If its the Create Object REST API, what JSON attributes needs to be defined.
Since the index is defined as an Elastiscsearch index, do I use Update Object?
Again,what JSON attributes needs to be defined?
Keep in mind that the GET returns no information after logstash has ingested the data.