Default kibana dashboards with custom index name

Elastic Stack Kibana
1

Hi Team,

I'm bit new to ELK stack. I enjoy learning it. I'm running on ELK 7.3.0 I have a question here.

  1. I have installed winlogbeat on the production server as well as the test server.

  2. I'm sending logs to logstash not directly to elasticsearch and writing it to custom indices
    "test-winlogs-%{+YYYY.MM.dd}" and "prod-winlogs-%{+YYYY.MM.dd"

I have loaded the dashboards from ./winlogbeat.ps1 setup --dashboards

Is there anyway to make the default kibana dashboards identify the customnamed indices and populate visualization from them ?

Any help will be greatly appreciated.

Regards
Karthik.K

2

Hi Karthik,

You have to manually change the index pattern in the dashboard JSON files.

Try this:
Export the saved objects as JSON from Kibana and edit the index pattern in the files. Then use the Import button in Saved Objects to import your modified files.

https://www.elastic.co/guide/en/kibana/7.3/managing-saved-objects.html

3

Hi Nickpeihl,

Thanks will try this and let you know.

Cheers
Karthik.K