as far as I know, kibana is storing all of its data in an own index in elasticsearch.
Since plain kibana (xpack is too expensive for us) does not have any user roles, each user is equal and can modify or delete anything in kibana. By mistake dashboard may break, or whatever.
My intention now is to setup an automatic backup of the content of the kibana index. I thought of following option:
- export the whole kibana index via curl
- stop kibana
- delete kibana index
- create new kibana index
- put all data from backup file to the index.
Then I can schedule the backup by cron for hourly or daily.
How can that be achieved? Are there any pitfalls I did not see?