As the event times index patterns are now deprecated we've been trying to migrate across to replacing them with wildcards. At the moment this is not working well, we have a number of clusters used by a number of different groups and we're finding that tags are often appended to indices with timestam…

To be more precise I'd like to be able to define a pattern that matches only finance-logs-YYYY.MM.DD and excludes indices with strings appended to them e.g. finance-logs-2016.02.03-temp

Github issue created as suggested, this should be a feature of Elasticsearch. [image] Issue: More powerful index pattern matching opened by pemontto on 2016-02-19 closed by clintongormley on 2016-05-24 Was speaking to @rashidkpc at the AMA booth at Elastic{ON} about the …

Discuss the Elastic Stack

Index filtering on more than a * wildcard

Elastic Stack Kibana

pemontto (Pemontto) February 19, 2016, 10:08pm 3

Github issue created as suggested, this should be a feature of Elasticsearch.

1 Like

Topic		Replies	Views
Time based index pattern + wildcard Kibana	4	3260	July 6, 2017
Use wildcard when defining event-time based index with Kibana 4.1.2 Kibana	2	847	July 6, 2017
Kibana 3 index settings Elasticsearch	15	622	July 6, 2017
Index pattern with same start name Kibana	4	586	June 17, 2019
Use index pattern with and without timebased events Kibana	4	3623	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Index filtering on more than a * wildcard

Related topics