I'm testing kibana with logs, and everytime create a new index ( with same fields), I'm recreating the entire kibana dashboard afresh, which seems to be a duplicate task. Is there any way to apply a dashboard/visualization to a new index. Please let me know.
When adding index into Kibana, you can use asterisk * to have Kibana search in multiple indexes. For example, if your testing indexes are myindex-1, myindex-2, myindex-3, when creating index pattern in Kibana, use myindex-*. If you use time based indexes, you can also specify date pattern like YYYY.MM.DD. For latest Kibana 4.4.0, just use asterisk.
1 Like
For me, I'm using the same index for test i.e. myindex-1, myindex-2 and myindex-3 in my case will have overlapping values. If I do this way, then I'm bound to have duplicates, which might give me wrong picture.
One method I'm currently using is to export the visualizations and changing the index name to the new index and importing it back to Kibana.
I think it would be good if we can change the index of a visualization in the UI itself. Currently we cannot change the index of a saved visualization.
Natarajan,
Currently, you can change the index name in the URI.
http://localhost:5601/app/kibana#/visualize/create?type=table&indexPattern=logstash-*&_g=(refreshInterval:(display:Off,pause:!f,value:0),time:(from:now-60d,mode:quick,to:now))&_a=(filters:!(),linked:!f,query:(query_string:(analyze_wildcard:!t,query:'*')),uiState:(),vis:(aggs:!((id:'1',params:(),schema:metric,type:count),(id:'2',params:(field:'@tags.raw',order:desc,orderBy:_term,size:5),schema:bucket,type:terms)),listeners:(),params:(perPage:10,showMeticsAtAllLevels:!f,showPartialRows:!f),title:'New%20Visualization',type:table))
The entire state is in the URI. But this is bound to change. But for now, you can simply change the
...&indexPattern=newIndex&....