How to deploy Kibana with preconfigured index pattern

Elastic Stack Beats
1

I'm trying to make the leap between developing and using ELK (plus Filebeat) to deploying it. I need to deploy Kibana in such a way as to have index pattern "filebeat-*" already configured/resident in Kibana so that users won't have to learn to do that--it will just already be done.

From Googling around, I'm guessing what I am asking isn't exactly how it's done, but I think my question helps understand what I mean. Please explain how to deploy Kibana with an index pattern pre-installed ready to begin to be used on the data that I know will flow from Filebeat to Logstash to Elasticsearch and then to Kibana.

2

Hi,

Have you met beats in our stack? :slight_smile:
https://www.elastic.co/downloads/beats

You can configure and install filebeats and when you load dashboards - it automatically creates an index template and pattern.

https://www.elastic.co/guide/en/beats/libbeat/current/getting-started.html

There are also tons of webinars here: https://www.elastic.co/videos
Hope that helps,

Thanks,
Bhavya

3

Thanks, Bhavya,

I'm using Filebeat containers on my application nodes to shoot log entries to a container running the ELK stack. This all works perfectly. I'm now looking for a solution that gives users a functioning Kibana as soon as they load it up in their browser without them having to learn to create an index pattern.

I already long ago waded through all of this material. It's why I'm asking experts in this forum for help deploying the Elastic parts of my solution. I need an installed index pattern (precisely, "filebeat-*") and, later, I'm going to want to ship Kibana with premade visualizations. Finally, I'm going to ask how my users can save any visualizations and dashboard content they create such that it can be transferred to other instances of ELK they have running.

4

Hi,

Loading filebeat dashboards (preconfigured dashboards) automatically creates the indexpattern filebeat-* for you: https://www.elastic.co/guide/en/beats/filebeat/current/load-kibana-dashboards.html
The docs there take you with the config options. So your users doesn't need to create an indexpattern.

You can import and export saved objects from the saved objects UI in management:

saved%20objects
saved objects.png3840×2160 720 KB

I am also posting your question to beats forum. If you have more questions - they woll help you.

Thanks,
Bhavya

5

Thank you. I don't completely understand this in any level of detail, but I understand the principle and will investigate.

6

Would you like to see how this is done for kubernetes? That might help?
https://www.elastic.co/webinars/observable-kubernetes-with-the-elastic-stack

https://www.elastic.co/videos/getting-started-with-filebeat

I will keep an eye out if I can find any videos.

Thanks,
Bhavya

1 Like
7

I explored some of these solutions and went another way which I've detailed in another discussion:

8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.