Import new search to kibana via command line


I am trying to import new search to elasticsearch .kibana index. Any idea how can I achieve that?


I'm not sure what you mean by import new search. So you wrote a query that you want to import into Kibana? Please elaborate.

In kibana you have multiple searches. I want to create new search for every newly added customer so that I can create a separate visualizations/dashboard for each of them. However I would like to script that process and do it via command line. Is there any ways to do that?


Or better is there a way to setup new searches/visualizations/dashboards via command line for kibana?

There is a similar discussion. Take a look at the link below:

This does not cover how to create kibana searches via scripts

I'm still a bit confused on what you mean by Kibana searches. Like using the Dev Tool to run queries or the Kibana visualization.

If it's the Kibana visualization , according to the discussion link :

Yes, you have to test it yourself to figure the params. It does not cover how.

In order to create visualizations you either need to create a new search for each visualization or use saved searches. Those saved searches are the purpose of this thread, But not able to figure out how to add them to the .kibana index.

There is no good way to do this as there is no Kibana API. In order to put the save searches into the .kibana index you will need to know all, if not most of the values that goes with it's mapping. Unfortunately, you will have to do test and error. You will have to generate some visuals in Kibana to see the params and values it generates and see if you can locate some common pattern to script this.

OK, it seam this way it not doable. However kibana have a manage page where I can import previously exported/edited searches as a new search. Is there a way to import that from curl request or should I ask the question in kibana section?

Yes, please ask in the Kibana section.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.