Defining index patterns

Hello, i have data coming into elasticsearch.. cool.. now in Kibana, i go to management, index patterns and add an index pattern, winlogbeat-* for example. This is fine, it shows up on the left as an index pattern. Great..

My question is though, even after i have created an index pattern for winlogbeat, it continues to show in the list of available indicies and even allows me to create another duplicate index pattern called winlogbeat-*, is this expected?

Yes that is expected, cause you may end up with something like winlogbeat-* and winlogbeat-servers-* and winlogbeat-desktops-* or other such things, if you decide to use different patterns for storing logs.

thank you :slight_smile:

Its knowing little things like that, that remove so much stress.

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.