Good afternoon, at the moment I am investigating how to restrict the filters of the kibana boards by time, at the moment I have a query that works for the alias_metricbeat of the index pattern metricbeat- *, however I see an inconvenience the pointing in the boards must switch to the alias, is there another way to do it?
POST /_aliases
{
"actions": [
{
"add": {
"index": "metricbeat-*",
"alias": "alias_metricbeat",
"filter": { "range": { "@timestamp": {"gte": "now-1M"}}}
}
}
]
}
No, there's no other way to do this sorry.
What's the drive behind wanting to restrict access to specific timeframes?
The reason is that there are users who consult from the kibana boards with time ranges for more than a year and this makes the cluster slow down, we already apply ILM policies where we include the rollover process, and while we implement the cycle well data lifetime, we thought about restricting the time range to some users.
The issue there is you are now having to manage the aliases and the dashboards.
ok thanks Warkolm
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.