# Index pattern for data stream

**URL:** <https://discuss.elastic.co/t/index-pattern-for-data-stream/274264>\
**Category:** Kibana\
**Tags:** datastreams\
**Created:** [May 27, 2021, 9:20pm UTC](https://discuss.elastic.co/t/index-pattern-for-data-stream/274264 "2021-05-27T21:20:36Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![anmmok](https://avatars.discourse-cdn.com/v4/letter/a/7c8e57/32.png) [@anmmok](https://discuss.elastic.co/u/anmmok)\
**Post date:** [May 27, 2021, 9:20pm UTC](https://discuss.elastic.co/t/index-pattern-for-data-stream/274264/1 "2021-05-27T21:20:36Z")

</div>

I'm trying to visualize the data from the data stream in Kibana.

So I’ve created an index template “api-logs” with the index pattern “api-logs\*”

and add some documents to the new data stream:

PUT api-logs/\_bulk

{ "create":{ } }

{ "@timestamp": "2021-05-05T10:00:00.000Z", "message": "test" }

The data stream was successfully created and I was able to check the docs via

GET api-logs /\_search

The backing index became the name “.ds-api-logs-000001” and everything seemed to be ok.

Now I want to explore the docs within Kibana.

I created a new Kibana index pattern and chose api-logs data stream.

But when i move to Discover, it shows me no data within this index/data stream.

I’ve also tried to create patterns for the index api-logs\* and _api-logs_ but without success.

What I’m doing wrong?

---

<div class="post-metadata">

**Author:** ![dosant](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dosant/32/64489_2.png) [@dosant](https://discuss.elastic.co/u/dosant)\
**Post date:** [May 28, 2021, 9:38am UTC](https://discuss.elastic.co/t/index-pattern-for-data-stream/274264/2 "2021-05-28T09:38:51Z")

</div>

Hi @anmmok,

I've just followed your steps and can see a test document in Discover. Could you check that your test document isn't filtered out by the time filter? By default Discover filter is "last 15 minutes"

---

<div class="post-metadata">

**Author:** ![anmmok](https://avatars.discourse-cdn.com/v4/letter/a/7c8e57/32.png) [@anmmok](https://discuss.elastic.co/u/anmmok)\
**Post date:** [May 28, 2021, 11:23am UTC](https://discuss.elastic.co/t/index-pattern-for-data-stream/274264/3 "2021-05-28T11:23:15Z")

</div>

Hi @dosant ,

yes, that was exactly the point.  
I forgot, that the timestamp field is the primary time field for the global time filter and thought it was a creation time of the documents, which is not even a field in my docs 🤦‍♂️ 😁

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 25, 2021, 11:23am UTC](https://discuss.elastic.co/t/index-pattern-for-data-stream/274264/4 "2021-06-25T11:23:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.