Elasticsearch logs when using custom index when shipping with Filebeat

Elastic Stack Kibana
1

Hey,

Is there a way to change the index that Kibana is looking for when trying to show cluster logs?
In the Logs view it could be changed by using the following parameter:
xpack.infra.sources.default.logAlias:
but for the Stack Monitoring view there doesn't seem to be a parameter available so it's just showing no logs found, altho the logs are available but just not in a filebeat-* index.

2

Hi @LLin,

Unfortunately, no. This isn't currently supported.

I'd recommend two things:

  1. Create a feature request (https://github.com/elastic/kibana/issues/new?template=Feature_request.md) for this
  2. If possible, create an alias to map filebeat-* to your custom index name. See https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-add-alias.html