I'm bit new to ELK stack. I enjoy learning it. I'm running on ELK 7.3.0 I have a question here.
I have installed winlogbeat on the production server as well as the test server.
I'm sending logs to logstash not directly to elasticsearch and writing it to custom indices
"test-winlogs-%{+YYYY.MM.dd}" and "prod-winlogs-%{+YYYY.MM.dd"
I have loaded the dashboards from ./winlogbeat.ps1 setup --dashboards
Is there anyway to make the default kibana dashboards identify the customnamed indices and populate visualization from them ?
You have to manually change the index pattern in the dashboard JSON files.
Try this:
Export the saved objects as JSON from Kibana and edit the index pattern in the files. Then use the Import button in Saved Objects to import your modified files.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.