I'm currently running a production server with Kibana 4.5.0 on FreeBSD (10.3)
I'm also evaluating on a test box Elastic 5.3 / Kibana 5.3 on FreeBSD (11.0)
I'm pretty jazzed about the possibilities with the timelion query/visualizations but I'm actually getting stuck on something rather more basic. I cannot seem to select an index filter from the query bar.
Given a default index of logstash-* where I have the following indexes
When viewing the default query of "" I see results from all of logstash- within the selected time period. I do see, when examining individual items in the "Discover" tab, that the _index field is properly set to, eg, logstash-default-web-2017-10-01, etc.
If I replace "" in the query bar with, say, "logstash-default-web-", this does not restrict the results - I still see the results from all logstash-* indices. This worked quite nicely in Kibana 4.5
Has something changed here? I haven't found anything obvious in the 5.X upgrade docs or the examples in the 5.X manuals.