# List logs from all indices in Discover (Kibana)

**URL:** https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801
**Category:** Kibana
**Created:** [August 30, 2017, 7:25am UTC](https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801 "2017-08-30T07:25:24Z")
**Posts on this page:** 12
**Page:** 1

<div class="post-metadata">

### Author: ![mjm](https://avatars.discourse-cdn.com/v4/letter/m/c6cbf5/32.png) [@mjm](https://discuss.elastic.co/u/mjm)
#### Post date: [August 30, 2017, 7:25am UTC](https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801/1 "2017-08-30T07:25:24Z")

</div>

**Problem:** Not able to list/visualize logs from all indices at once in Discover (Kibana)

I tried to list logs from all indices by selecting the "_" index, which i have set as default index. Not happening. I am able to see only "monitoring-es" in the "_" index (set as default index).

Please help or let me know if you guys need more information.

Also, i want to know what exactly happens when you set an index as "default".

All efforts are very much appreciated.

---

<div class="post-metadata">

### Author: ![immavalls](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/immavalls/32/146501_2.png) [@immavalls](https://discuss.elastic.co/u/immavalls)
#### Post date: [August 30, 2017, 11:11am UTC](https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801/2 "2017-08-30T11:11:16Z")

</div>

I think you can create an index pattern "\*" in Management - Index Patterns.

---

<div class="post-metadata">

### Author: ![mjm](https://avatars.discourse-cdn.com/v4/letter/m/c6cbf5/32.png) [@mjm](https://discuss.elastic.co/u/mjm)
#### Post date: [August 30, 2017, 1:38pm UTC](https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801/3 "2017-08-30T13:38:25Z")

</div>

Hey

Thank you for the reply !!

I tried that; creating an index as \* in Management - Index Patterns.

Not working for me.

If that is how it is supposed to be done, then i should be missing something.

Appreciate any directions.

---

<div class="post-metadata">

### Author: ![immavalls](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/immavalls/32/146501_2.png) [@immavalls](https://discuss.elastic.co/u/immavalls)
#### Post date: [August 30, 2017, 1:50pm UTC](https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801/4 "2017-08-30T13:50:10Z")

</div>

Actually you don't usually create an index pattern for all indexes. What are your indexes names? Do they have data? In what timeframe?

---

<div class="post-metadata">

### Author: ![mjm](https://avatars.discourse-cdn.com/v4/letter/m/c6cbf5/32.png) [@mjm](https://discuss.elastic.co/u/mjm)
#### Post date: [September 4, 2017, 5:50am UTC](https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801/5 "2017-09-04T05:50:04Z")

</div>

- I believe I am not looking for creating an index pattern.
- Also, i have two indices created, and they do have data in them.

What i am looking for is a way to list the data of all indices in the Discover tab.

Something like, index=\*

Also, in the Discover tab, there is this drop down menu where i am able to select the index that will let me view the data of that particular index. But my aim is to view the data from all indices at once.

(In Splunk this is done by searching, index=\*)

Thanks for the help ! Appreciate it.

---

<div class="post-metadata">

### Author: ![immavalls](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/immavalls/32/146501_2.png) [@immavalls](https://discuss.elastic.co/u/immavalls)
#### Post date: [September 4, 2017, 6:44am UTC](https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801/6 "2017-09-04T06:44:20Z")

</div>

As far as I know, in Kibana you should to create an index pattern, in your case \*, and then in the discover drop down you select that pattern.

---

<div class="post-metadata">

### Author: ![mjm](https://avatars.discourse-cdn.com/v4/letter/m/c6cbf5/32.png) [@mjm](https://discuss.elastic.co/u/mjm)
#### Post date: [September 4, 2017, 6:48am UTC](https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801/7 "2017-09-04T06:48:12Z")

</div>

Yes. You are right.

I am able to do this. But when i select the index \* from the drop down menu, i am not able to view logs from all indices. Index \* just shows the Kibana system logs.

---

<div class="post-metadata">

### Author: ![immavalls](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/immavalls/32/146501_2.png) [@immavalls](https://discuss.elastic.co/u/immavalls)
#### Post date: [September 4, 2017, 11:44am UTC](https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801/8 "2017-09-04T11:44:56Z")

</div>

Have you adjusted the time range on top? Maybe your data is not in the selected range.

---

<div class="post-metadata">

### Author: ![mjm](https://avatars.discourse-cdn.com/v4/letter/m/c6cbf5/32.png) [@mjm](https://discuss.elastic.co/u/mjm)
#### Post date: [September 5, 2017, 6:13am UTC](https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801/9 "2017-09-05T06:13:01Z")

</div>

Yes. I have checked that part.

In the selected time range, i am able to view logs in the respective indices.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 3, 2017, 6:13am UTC](https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801/10 "2017-10-03T06:13:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 3, 2017, 6:13am UTC](https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801/11 "2017-10-03T06:13:33Z")

</div>



---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 4, 2022, 4:56am UTC](https://discuss.elastic.co/t/list-logs-from-all-indices-in-discover-kibana/98801/12 "2022-11-04T04:56:59Z")

</div>


