Kibana Index configuration

Elastic Stack Kibana
1

All,

How can we configuration an index without using the Settings UI programmatically in Kibana? If there is way please let us know how it can be done.

I need a use case for which settings module is not exposed. so i need to configure the Index for Kibana to get data in discover.

Please some one help me out as soon as possible.

Thanks & Regards,
Santhosh V

2

Hey Santosh,

Hmm, the way kibana stores it's settings is via a .kibana index on your ES Cluster, if you take a look at those documents, perhaps it'll be clear to you then what you need to change.

Let me know if you need anymore assistance.

Peace,
Khalah Jones Golden

3

I'm still a Kibana newbie but here's a trick I figured out;

  1. Go into Kibana (I'm on latest version) and go to Settings tab.
  2. You probably already have a logstash default index pattern, but click [+ Add New] in the top left corner.
  3. Uncheck "Index contains time-based events"
  4. type in ".kibana"
  5. Click [Create]. You should see 5 fields.
  6. Go to Discover tab
  7. Top left corner switch from logstash-* pattern to your .kibana pattern
  8. I get 4 hits. One of those hits in my case had title: "logstash-*"
  9. click the arrow next to that one, and then click JSON link. I think that's the data you would have to write to the kibana index to create the logstash index programatically

Or, even easier;
try this; http://localhost:9200/.kibana/_search
or more specifically this; http://localhost:9200/.kibana/_search?q=title:logstash

Use Chrome browser with "JSON Formatter" extension for easy to read output.

1 Like
4

Also, this is in the works but not out yet; https://github.com/elastic/kibana/pull/5213 "Create an Index Pattern API"

You could follow that pull request and try it out.

5

Hi @LeeDr, @Khalah_Jones_Golden, thanks for your concise guide. Is it just me or have the [+ Add New] in the top left changed as i can't seem to find it in my Kibana installation in order to configure an index pattern. How else apart from setting it up in Kibana can I get an index pattern set up? Thanks in advance.

6

There's not really an "Add" or "New" button for creating a new index pattern. You just type the pattern in the "Index name or pattern" field on the Settings > Indices tab. And depending if your "Index contains time-based events" enter the "Time-field name" and click "Create".

Regards,
Lee

7

thanks for the response @LeeDr, it still beats me. I must be doing something wrong.
I follow the instructions but the "Create" button or link shows up not.

Screenshot 2016-05-28 09.32.37.png1440×900 176 KB

8

#Solved