We have 3 indices that are not named consistently, and we'd like a new index pattern that will allow queries to all three indices. Without renaming the existing indices, is there a good way to allow 3 index patterns inside a single NEW index pattern?
Also, somewhat unrelated, our index patterns are somewhat long, such that in the Discover screen the end of the index pattern is hidden because the UI doesn't show the whole string. Does anyone know how to get around this?
Each of our indices have their own alias which need to be maintained, as our logstash puts data into each independently of one another. Each index also has its own index pattern. We just want an additional index pattern that can query all three.
I guess I am missing some more details here. Just because there is already an alias, doesn't mean you cannot add another one, that groups those three indices and use that for an index pattern. Can you explain what's blocking you from doing this in more detail?
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.