How to keep `selected fields` fixed

Elastic Stack Kibana
1

When you check log items from Kibana, you can fix the items with selected fields.

This setting is very useful, but it gets lost when you close your browser. Is there a way to keep this?

2

Select the item you want to display in the column in Discover from the Available fields, and press the Save button (Save visualization?) in the upper right corner. to save the object. This is probably the most common method. Maybe.
Is this the right way?

How do you generally expect to use Kibana in such a case?

3

I assume you are referring to the discover application and the fields which are shown as columns.

There are three separate ways to do this:

  • Save a saved search (that's what you did) It's a nice approach because you can save multiple "views" this way and easily switch between them by using the "Open" button
  • Configure your columns, then bookmark the current URL. Discover puts this configuration into the hash part of the URL as well, so that's another way of storing it. If you navigate to the bookmark later, it will load this configuration from URL
  • If you always want to use these default columns, you can also use the defaultColumns advanced setting. Be aware that this is a space wide setting that will affect Discover even if you change the index pattern and the columns don't match.
2 Likes
4

Thank you for your comment.

I am relieved to know that the usage I have implemented is correct.

I see that I can bookmark the URL. This is very easy.

As for defaultColumns, are you assuming that the same fields are present in all index patterns?

However, in my case (and I think it's a common case), I have different index patterns with different referenced fields.
Is it a good approach to set defaultColumns in that case?

5

However, in my case (and I think it's a common case), I have different index patterns with different referenced fields.
Is it a good approach to set defaultColumns in that case?

I don't think so, it's more of a niche option if you are dealing with very uniform data. Bookmark and saved searches are the way to go.

6

I understand.

Initially, I was collecting logs of the same format from several servers.
In this case, the logs are uniform, so it seems that defaultColumns can be used.

However, now we are collecting logs in different formats.
In this case, it would be better to use bookmarks or saved searches.

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.