# Kibana4 not specifying date in search index \[SOLVED\]

**URL:** <https://discuss.elastic.co/t/kibana4-not-specifying-date-in-search-index-solved/45484>\
**Category:** Kibana\
**Created:** [March 25, 2016, 9:48pm UTC](https://discuss.elastic.co/t/kibana4-not-specifying-date-in-search-index-solved/45484 "2016-03-25T21:48:47Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![dm221](https://avatars.discourse-cdn.com/v4/letter/d/ecccb3/32.png) [@dm221](https://discuss.elastic.co/u/dm221)\
**Post date:** [March 25, 2016, 9:48pm UTC](https://discuss.elastic.co/t/kibana4-not-specifying-date-in-search-index-solved/45484/1 "2016-03-25T21:48:47Z")

</div>

So we've been looking at moving to Kibana4.x lately but have noticed that simple 15min duration Discover queries take a long time (10 -60 seconds). Upon investigation it seems that Kibana4.1.7 does a msearch where it specifies the indices with a wildcard index (e.g. logstash-\*) as opposed to using the actual date(s) (e.g. logstash-2016.03.25).

This is causing a huge performance hit. Why was this change made and is there any way to have the indices specified in a similar way to kibana3? It seems silly to search all indices for the last 15 minutes of data if you know that will be in a specific index with today's date.

Any ideas, similar experiences, fixes?

---

<div class="post-metadata">

**Author:** ![lukas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lukas/32/6812_2.png) [@lukas](https://discuss.elastic.co/u/lukas)\
**Post date:** [March 25, 2016, 10:18pm UTC](https://discuss.elastic.co/t/kibana4-not-specifying-date-in-search-index-solved/45484/2 "2016-03-25T22:18:47Z")

</div>

Specifically which version of Kibana 4.x are you evaluating? There are different ways to improve this depending on the version of Kibana you're using.

---

<div class="post-metadata">

**Author:** ![dm221](https://avatars.discourse-cdn.com/v4/letter/d/ecccb3/32.png) [@dm221](https://discuss.elastic.co/u/dm221)\
**Post date:** [March 26, 2016, 2:25am UTC](https://discuss.elastic.co/t/kibana4-not-specifying-date-in-search-index-solved/45484/3 "2016-03-26T02:25:57Z")

</div>

Hi Lukas,

I'm using 4.1.7. Since I'm still on elasticsearch 1.7.5 I think that's the top version I can use.

Thanks for the response,  
David

---

<div class="post-metadata">

**Author:** ![dm221](https://avatars.discourse-cdn.com/v4/letter/d/ecccb3/32.png) [@dm221](https://discuss.elastic.co/u/dm221)\
**Post date:** [March 28, 2016, 9:00pm UTC](https://discuss.elastic.co/t/kibana4-not-specifying-date-in-search-index-solved/45484/4 "2016-03-28T21:00:08Z")

</div>

OK, so I discovered how to do this. When you specify the index initially (_Configure an index pattern_) you also must check the **Use event times to create index names** checkbox.

---

<div class="post-metadata">

**Author:** ![lukas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lukas/32/6812_2.png) [@lukas](https://discuss.elastic.co/u/lukas)\
**Post date:** [March 29, 2016, 6:11pm UTC](https://discuss.elastic.co/t/kibana4-not-specifying-date-in-search-index-solved/45484/5 "2016-03-29T18:11:13Z")

</div>

Sorry I didn't respond sooner! Yes, this is the correct setting to use.

For future versions of Kibana, we've optimized this so you can still use a wildcard index (e.g. logstash-\*) without having to specify name-based indices. (See [https://github.com/elastic/kibana/issues/4342.)](https://github.com/elastic/kibana/issues/4342.))

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:57pm UTC](https://discuss.elastic.co/t/kibana4-not-specifying-date-in-search-index-solved/45484/6 "2017-07-06T13:57:32Z")

</div>