# How to backup "index pattern", "setting of visualization or dashboard" and et al.?

**URL:** <https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755>\
**Category:** Kibana\
**Created:** [September 7, 2015, 6:47am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755 "2015-09-07T06:47:50Z")\
**Posts on this page:** 16\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jason\_Zheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jason_zheng/32/4041_2.png) [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Post date:** [September 7, 2015, 6:47am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/1 "2015-09-07T06:47:50Z")

</div>

Hi all,

After I updating license (Extend Shield and Watcher License), all of kibana setting (Web operations) are gone, I don't know why?

I would like to backup kibana setting (Web operations), is it possible or someone have any idea? thanks

Jason

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 7, 2015, 6:51am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/2 "2015-09-07T06:51:44Z")

</div>

That shouldn't happen, does the index still exist?

You can backup using snapshot and restore.

Also do you have a support subscription? If so I'd suggest you contact the support team.

---

<div class="post-metadata">

**Author:** ![Jason\_Zheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jason_zheng/32/4041_2.png) [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Post date:** [September 7, 2015, 7:07am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/3 "2015-09-07T07:07:48Z")

</div>

Hi Mark,

Thanks for replying, the settings of past 30 days are gone, the setting status of kibana seems back to before 1 months

For now, the browser never ask user/password when I visit Kibana after license updating even I clear caches of browser. The extend license (Shield and Watcher) is obtained from elastic.co support team, all of my nodes are updated:

Shall the license plugin cover 'Kibana'?

Jason

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 7, 2015, 7:12am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/4 "2015-09-07T07:12:01Z")

</div>

I removed the license from your post, please don't post them to the forums as then anyone can use them!

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 7, 2015, 8:22am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/5 "2015-09-07T08:22:10Z")

</div>

Can you explain what you mean by the settings being not what you expect?

---

<div class="post-metadata">

**Author:** ![Jason\_Zheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jason_zheng/32/4041_2.png) [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Post date:** [September 7, 2015, 8:32am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/6 "2015-09-07T08:32:39Z")

</div>

Hi Mark,

All status of Kibana setting goes back 1 month ago, for example  
July ~ Non-license plugin (non-shield)  
I create A, B and C index pattern, save D, E visualization and F dashboard during July

License plugin installed ~ License expirid (Shield installed)  
I delete B, C index pattern and Create B' and C', save D', E' visualization and F' Dashboard during Auguest

License expired ~ License updated (Subscription type: Gold, Shield and Watcher, 2 nodes)  
The status of Kibana setting: A, B and C index pattern, D, E visualization and F dashboard, all of operations of auguest are gone

Jason

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 7, 2015, 8:40am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/7 "2015-09-07T08:40:08Z")

</div>

If you have a gold subscription level then you should really be talking to the Support team directly, assistance for these sorts of issues is included in your subscription 🙂

---

<div class="post-metadata">

**Author:** ![Jason\_Zheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jason_zheng/32/4041_2.png) [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Post date:** [September 7, 2015, 8:48am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/8 "2015-09-07T08:48:47Z")

</div>

Hi Mark,

Not really gold subscription, license type is trial.

As I know, all of kibana settings should be saved in ".kibana" index, is it a file or a index of elasticsearch, if .kibana index is a index of elasticsearch, it should not be back.

Jason

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 8, 2015, 1:10am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/9 "2015-09-08T01:10:01Z")

</div>

All of the KB things like dashboards and index settings are saved in Elasticsearch.  
Can you grab the entire Kibana index from Elasticsearch and see what is in there?

---

<div class="post-metadata">

**Author:** ![Jason\_Zheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jason_zheng/32/4041_2.png) [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Post date:** [September 8, 2015, 2:54am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/10 "2015-09-08T02:54:00Z")

</div>

Hi Mark,

I don't really know how to query to '.kibana' of elasticsearch, following is my steps,

```
$curl 'http://localhost:9200/_cat/indices?v'
....
green open logstash-miki-2015.09.04 2 0 7277 0 2.1mb 2.1mb
yellow open .watch_history-2015.09.04 1 1 15802 0 2.4mb 2.4mb
yellow open logstash-2015.08.14 5 1 42595 0 13mb 13mb
yellow open .kibana 1 1 15 3 63.9kb 63.9kb
....

```

And then,

```
$curl -XGET 'http://localhost:9200/.kibana?pretty'
{
  ".kibana" : {
    "aliases" : { },
    "mappings" : {
      "config" : {
        "properties" : {
          "buildNum" : {
            "type" : "long"
          },
          "defaultIndex" : {
            "type" : "string"
          }
        }
      },
      "index-pattern" : {
        "properties" : {
          "fieldFormatMap" : {
            "type" : "string"
          },
          "fields" : {
            "type" : "string"
          },
          "intervalName" : {
            "type" : "string"
          },
          "timeFieldName" : {
            "type" : "string"
          },
          "title" : {
            "type" : "string"
          }
        }
      },
      "dashboard" : {
        "properties" : {
          "description" : {
            "type" : "string"
          },
          "hits" : {
            "type" : "integer"
          },
          "kibanaSavedObjectMeta" : {
            "properties" : {
              "searchSourceJSON" : {
                "type" : "string"
              }
            }
          },
          "panelsJSON" : {
            "type" : "string"
          },
          "timeFrom" : {
            "type" : "string"
          },
          "timeRestore" : {
            "type" : "boolean"
          },
          "timeTo" : {
            "type" : "string"
          },
          "title" : {
            "type" : "string"
          },
          "version" : {
            "type" : "integer"
          }
        }
      },
      "visualization" : {
        "properties" : {
          "description" : {
            "type" : "string"
          },
          "kibanaSavedObjectMeta" : {
            "properties" : {
              "searchSourceJSON" : {
                "type" : "string"
              }
            }
          },
          "savedSearchId" : {
            "type" : "string"
          },
          "title" : {
            "type" : "string"
          },
          "version" : {
            "type" : "integer"
          },
          "visState" : {
            "type" : "string"
          }
        }
      },
      "search" : {
        "properties" : {
          "columns" : {
            "type" : "string"
          },
          "description" : {
            "type" : "string"
          },
          "hits" : {
            "type" : "integer"
          },
          "kibanaSavedObjectMeta" : {
            "properties" : {
              "searchSourceJSON" : {
                "type" : "string"
              }
            }
          },
          "sort" : {
            "type" : "string"
          },
          "title" : {
            "type" : "string"
          },
          "version" : {
            "type" : "integer"
          }
        }
      }
    },
    "settings" : {
      "index" : {
        "creation_date" : "1436151025757",
        "number_of_shards" : "1",
        "uuid" : "g-uznPAnQJyqPwe8vNQbnA",
        "version" : {
          "created" : "1060099"
        },
        "number_of_replicas" : "1"
      }
    },
    "warmers" : { }
  }
}
```

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 8, 2015, 8:22am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/11 "2015-09-08T08:22:16Z")

</div>

Try `curl -XGET 'http://localhost:9200/.kibana/_search?pretty'` and then see if all your dashboards are there.

Shield will not just delete things, it has to have been done by someone.

---

<div class="post-metadata">

**Author:** ![Jason\_Zheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jason_zheng/32/4041_2.png) [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Post date:** [September 8, 2015, 8:46am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/12 "2015-09-08T08:46:56Z")

</div>

> [@warkolm](#):
>
> curl -XGET '[http://localhost:9200/.kibana/\_search?pretty](http://localhost:9200/.kibana/_search?pretty)'

Hi Mark,

The result is:

```
{
  "took" : 1,
  "timed_out" : false,
  "_shards" : {
    "total" : 1,
    "successful" : 1,
    "failed" : 0
  },
  "hits" : {
    "total" : 15,
    "max_score" : 1.0,
    "hits" : [ {
      "_index" : ".kibana",
      "_type" : "visualization",
      "_id" : "AreaChart_RXTX",
      "_score" : 1.0,
      "_source":{"title":"AreaChart_RXTX","visState":"{\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"radiusRatio\":9,\"scale\":\"linear\",\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"ismb.miki.vnic.rx\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"d\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"ismb.miki.vnic.tx\"}}],\"listeners\":{}}","description":"","savedSearchId":"TypeJson","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[]}"}}
    }, {
      "_index" : ".kibana",
      "_type" : "visualization",
      "_id" : "AreaChart",
      "_score" : 1.0,

```

For example, \_id AreaChart has been to deleted by myself on Auguest, but its recover by itself?

The status of dashboards or visualizations setting is go back to 1 month ago (July), I create something and delete something on Aug, but now all of my operations are missing just like I recover '.kibana' index to July, but I didn't do any snapshot or recover for '.kibana', or satisfy something to make '.kibana' to recover by itself?

Jason

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 8, 2015, 8:53am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/13 "2015-09-08T08:53:58Z")

</div>

Who else has access to the cluster? Have you asked them if they have restored anything?

---

<div class="post-metadata">

**Author:** ![Jason\_Zheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jason_zheng/32/4041_2.png) [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Post date:** [September 8, 2015, 9:26am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/14 "2015-09-08T09:26:41Z")

</div>

Hi Mark,

All of my cluster were built on my VM, and it provision under firewall of my office, only me access to the cluster, nobody else, so it so strange, the status of '.kibana' index goes back to 1 month ago after updating license (Shield and Watcher), BTW, the kibana server shutdown accidentally when I updating license ( does it matter?)

Jason

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 8, 2015, 10:54am UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/15 "2015-09-08T10:54:22Z")

</div>

No it should not matter.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:13pm UTC](https://discuss.elastic.co/t/how-to-backup-index-pattern-setting-of-visualization-or-dashboard-and-et-al/28755/16 "2017-07-06T14:13:36Z")

</div>