# Index in elastic

**URL:** <https://discuss.elastic.co/t/index-in-elastic/296909>\
**Category:** Kibana\
**Created:** [February 10, 2022, 10:11pm UTC](https://discuss.elastic.co/t/index-in-elastic/296909 "2022-02-10T22:11:33Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![alex\_96](https://avatars.discourse-cdn.com/v4/letter/a/ec9cab/32.png) [@alex\_96](https://discuss.elastic.co/u/alex_96)\
**Post date:** [February 10, 2022, 10:11pm UTC](https://discuss.elastic.co/t/index-in-elastic/296909/1 "2022-02-10T22:11:33Z")

</div>

Hello, I'm new to elastic, tell me if it's possible to do such a thing, create an index pattern, for example “index-\*” without adding %{+YYYY.MM.dd} , but so that an index like this is automatically created on the onset of a new day - “index-2022.02.09” , and so every day, I need to do this to visualize the data, thanks in advance

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [February 10, 2022, 11:29pm UTC](https://discuss.elastic.co/t/index-in-elastic/296909/2 "2022-02-10T23:29:38Z")

</div>

Can you clarify where you want this index pattern?

---

<div class="post-metadata">

**Author:** ![alex\_96](https://avatars.discourse-cdn.com/v4/letter/a/ec9cab/32.png) [@alex\_96](https://discuss.elastic.co/u/alex_96)\
**Post date:** [February 11, 2022, 6:39am UTC](https://discuss.elastic.co/t/index-in-elastic/296909/3 "2022-02-11T06:39:35Z")

</div>

To create dashboards, when the index is created by the day, you need to constantly change the index pattern, this is not very convenient, or is there a way to automate the replacement of the index, I will be grateful for the hint

---

<div class="post-metadata">

**Author:** ![Tomo\_M](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/32.png) [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)\
**Post date:** [February 11, 2022, 7:07am UTC](https://discuss.elastic.co/t/index-in-elastic/296909/4 "2022-02-11T07:07:13Z")

</div>

Index pattern of “index-\*” doesn't work?

---

<div class="post-metadata">

**Author:** ![alex\_96](https://avatars.discourse-cdn.com/v4/letter/a/ec9cab/32.png) [@alex\_96](https://discuss.elastic.co/u/alex_96)\
**Post date:** [February 11, 2022, 8:55am UTC](https://discuss.elastic.co/t/index-in-elastic/296909/5 "2022-02-11T08:55:37Z")

</div>

Let me explain with a screenshot what I want, using the wazuh pattern as an example  
 ![wazuh alerts](https://us1.discourse-cdn.com/elastic/original/3X/4/d/4d1646c74db7af5713c569b843d78fc813c831b3.png)  
 ![wazuh alerts 2](https://us1.discourse-cdn.com/elastic/original/3X/b/f/bfcca7e33ebea963d1644f7d84205e9d7cca270b.png)

---

<div class="post-metadata">

**Author:** ![Tomo\_M](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/32.png) [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)\
**Post date:** [February 11, 2022, 9:16am UTC](https://discuss.elastic.co/t/index-in-elastic/296909/6 "2022-02-11T09:16:24Z")

</div>

Which index do you want to select by your index pattern? Do you want just select the latest index like `wazuh-alerts-4.x-2022.01.02` on Jan 02?

If so, you may use "wazuh-alerts-4.x\*" and filter by date. I'm not sure I caught what you want.

---

<div class="post-metadata">

**Author:** ![alex\_96](https://avatars.discourse-cdn.com/v4/letter/a/ec9cab/32.png) [@alex\_96](https://discuss.elastic.co/u/alex_96)\
**Post date:** [February 11, 2022, 10:57am UTC](https://discuss.elastic.co/t/index-in-elastic/296909/7 "2022-02-11T10:57:32Z")

</div>

Here, look, in the kibana visualization, I can specify this pattern (wazuh-alerts-\*) which will include all previously created patterns by day  
 ![dashboard](https://us1.discourse-cdn.com/elastic/original/3X/6/3/633bd72a4bce879d9f9dcfe00529a7f0f3fbe66f.png)

---

<div class="post-metadata">

**Author:** ![Tomo\_M](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/32.png) [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)\
**Post date:** [February 11, 2022, 11:01am UTC](https://discuss.elastic.co/t/index-in-elastic/296909/8 "2022-02-11T11:01:05Z")

</div>

What is the problem?  
Which index do you want to select by your index pattern?

---

<div class="post-metadata">

**Author:** ![alex\_96](https://avatars.discourse-cdn.com/v4/letter/a/ec9cab/32.png) [@alex\_96](https://discuss.elastic.co/u/alex_96)\
**Post date:** [February 11, 2022, 11:10am UTC](https://discuss.elastic.co/t/index-in-elastic/296909/9 "2022-02-11T11:10:32Z")

</div>

In this case, I will select wazuh-alerts-\* and I can easily filter events in it, let's say 2 days ago, but these are wazuh indexes, it creates such a pattern automatically, I want to understand how to create such a template and filter them by day as I want, instead of creating a new index for each day

---

<div class="post-metadata">

**Author:** ![Tomo\_M](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/32.png) [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)\
**Post date:** [February 11, 2022, 11:16am UTC](https://discuss.elastic.co/t/index-in-elastic/296909/10 "2022-02-11T11:16:05Z")

</div>

Hmm, I'm not sure I get exactly what you want. I got you want to create index pattern from new indecis created some day.

But anyway, creating index pattern automatically is very difficult.

> [@How can i create Index patterns in Kibana Automatically Every Day](https://discuss.elastic.co/t/how-can-i-create-index-patterns-in-kibana-automatically-every-day/227578):
>
> My indexes are created every day like xxx-yy-mm-dd, how can I create index patterns automatically without my involment .Because every day i have plenty indices from elastticsearch and i am manually creating all the index pattens in Kibana it is so much time consuming process.Can anyone helpme out of this how can i create Index patterns in Kibana automatically?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 11, 2022, 11:17am UTC](https://discuss.elastic.co/t/index-in-elastic/296909/11 "2022-03-11T11:17:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
