Default kibana dashboards with custom index name

Hi Team,

I'm bit new to ELK stack. I enjoy learning it. I'm running on ELK 7.3.0 I have a question here.

  1. I have installed winlogbeat on the production server as well as the test server.

  2. I'm sending logs to logstash not directly to elasticsearch and writing it to custom indices
    "test-winlogs-%{+YYYY.MM.dd}" and "prod-winlogs-%{+YYYY.MM.dd"

I have loaded the dashboards from ./winlogbeat.ps1 setup --dashboards

Is there anyway to make the default kibana dashboards identify the customnamed indices and populate visualization from them ?

Any help will be greatly appreciated.


Hi Karthik,

You have to manually change the index pattern in the dashboard JSON files.

Try this:
Export the saved objects as JSON from Kibana and edit the index pattern in the files. Then use the Import button in Saved Objects to import your modified files.

Hi Nickpeihl,

Thanks will try this and let you know.


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.