Kibana's data dependency

Elastic Stack Kibana
1

Hi,
I'm maintaining Linux machines for Kibana & ES
I accidentally delete ES machine and nothing left of it except several files/ dependencies

After recover it with the appropriate data, I reopen both machines and notice that Kibana's data (queries & visualize) is gone. Trying to create previous index pattern came up with nothing

My only assumption is that deleting the cluster remove the dependency of Kibana’s queries from it index pattern and perhaps Kibana automatically get rid of them.

Am I right?

Help will be appreciate :+1:

2

@avivc Kibana uses Elasticsearch to store it's Saved Objects including visualizations/queries/dashboards and they're stored in the .kibana index in Elasticsearch by default. If you're able to restore the .kibana index in Elasticsearch, your visualizations/queries should show up again.

1 Like
3

Tnx @Brandon_Kobel
As kibana.yml describes:

Kibana uses an index in Elasticsearch to store saved searches, visualizations and
dashboards. Kibana creates a new index if the index doesn’t already exist.
kibana.index: ".kibana"

My question is, regarding to your answer and to this configuration, why this objects stored in .kibana if I custom index/es ? what happened if I set default index like this: #kibana.index: ".kibana"

4

@avivc if you changed the index that kibana uses with kibana.index: custom-name setting then it won't use the .kibana index but the index that you specified.

1 Like
5

@Brandon_Kobel Thank you for the input

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.