# Disable auto create data view

**URL:** <https://discuss.elastic.co/t/disable-auto-create-data-view/385795>\
**Category:** Kibana\
**Created:** [April 7, 2026, 10:58am UTC](https://discuss.elastic.co/t/disable-auto-create-data-view/385795 "2026-04-07T10:58:53Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![tmp13](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tmp13/32/78005_2.png) [@tmp13](https://discuss.elastic.co/u/tmp13)\
**Post date:** [April 7, 2026, 10:58am UTC](https://discuss.elastic.co/t/disable-auto-create-data-view/385795/1 "2026-04-07T10:58:53Z")

</div>

Hi.

I use Kibana 9.3

I cant find how to disable auto create dataview like:

- logs-\*
- metrics-\*
- All logs

Thnx.

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [April 7, 2026, 12:08pm UTC](https://discuss.elastic.co/t/disable-auto-create-data-view/385795/2 "2026-04-07T12:08:37Z")

</div>

Hello @tmp13

Found below documentation :

> <https://github.com/elastic/kibana/issues/202807>
>
> \## User Story
> 
> As a \*\*security-conscious administrator using Kibana spaces for d…ata segregation\*\*, I want the ability to disable the automatic creation of global \`logs-\*\` and \`metrics-\*\` data views, so that I can prevent information leakage and ensure that users only see data views relevant to their access permissions.  
> 
> \## Acceptance Criteria
> 
> \- \[x\] Add a configuration setting (\`xpack.fleet.enableManagedLogsAndMetricsDataviews\`) that:  
> - \[x\] Defaults to \`true\` to maintain existing behavior.  
> - \[x\] Allows administrators to opt-out of the creation of these global data views.  
> \- \[x\] Ensure this setting is allowlisted in the ESS cloud user settings editor for configurability in cloud environments.

> <https://github.com/elastic/kibana/issues/189166>
>
> 🛑 Blocked by https://github.com/elastic/kibana/issues/201669
> 
> As part of https:/…/github.com/elastic/observability-dev/issues/3498 , a central setting is introduced that signifies where observability-related logs can be found. The intent is to replace the existing logs setting of the logs stream app and align across as many places as possible, so the user doesn't have to configure logs data access in multiple places.
> 
> One of these places is KQL-based Discover - Users have a flexible tool with data views to configure what data to show. To make it easy to always get back to all logs (in the sense of the central observability setting), there should be an implicit ad-hoc data view synced to the setting that's always available:
> \* When going to Discover in an observability context, an "All logs" ad-hoc data view is added to the state based on the advanced setting
> \* The default data view logic is not changed
> 
> This gives the user an easy way to always look at all logs.

For All Logs → If you are not using Observability , in Space Solution view can only select Elasicsearch instead of Classic

Thanks!!

---

<div class="post-metadata">

**Author:** ![tmp13](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tmp13/32/78005_2.png) [@tmp13](https://discuss.elastic.co/u/tmp13)\
**Post date:** [April 7, 2026, 1:21pm UTC](https://discuss.elastic.co/t/disable-auto-create-data-view/385795/3 "2026-04-07T13:21:50Z")

</div>

I using Observability but only apm-server, and i need Classic view.

---

<div class="post-metadata">

**Author:** ![tmp13](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tmp13/32/78005_2.png) [@tmp13](https://discuss.elastic.co/u/tmp13)\
**Post date:** [April 7, 2026, 5:51pm UTC](https://discuss.elastic.co/t/disable-auto-create-data-view/385795/4 "2026-04-07T17:51:47Z")

</div>

And with classic view can i disable All logs, when i use APM?

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [April 8, 2026, 6:43am UTC](https://discuss.elastic.co/t/disable-auto-create-data-view/385795/5 "2026-04-08T06:43:48Z")

</div>

Hello @tmp13

I did not find any way to keep the Classic View in Space & remove the All Logs default Data View ☹

Thanks!!

---

<div class="post-metadata">

**Author:** ![tmp13](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tmp13/32/78005_2.png) [@tmp13](https://discuss.elastic.co/u/tmp13)\
**Post date:** [April 8, 2026, 6:50am UTC](https://discuss.elastic.co/t/disable-auto-create-data-view/385795/6 "2026-04-08T06:50:27Z")

</div>

What its mean? I must create issue?))

Becouse peaples dont understand why his must select Data View with specific logs, instead of selecting “All Logs” =)

“All logs” generate more resource usage…. therefore more time for select some data…

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [April 8, 2026, 7:03am UTC](https://discuss.elastic.co/t/disable-auto-create-data-view/385795/7 "2026-04-08T07:03:11Z")

</div>

Hello @tmp13

Yes need to raise issue if we want to disable this but you do have a way by creating a new dataview with the logs you need & making that as the default data view in your space. So until a user manually selects this default “All Logs” dataview it will not be loaded .

Thanks!!

---

<div class="post-metadata">

**Author:** ![tmp13](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tmp13/32/78005_2.png) [@tmp13](https://discuss.elastic.co/u/tmp13)\
**Post date:** [April 8, 2026, 7:37am UTC](https://discuss.elastic.co/t/disable-auto-create-data-view/385795/8 "2026-04-08T07:37:44Z")

</div>

About default Data View i understand, i already done this.

Thnx for you assistance. When i create issue i pin link here, may be it help for raise this)
