Load template in kibana

[Blason (R)]

Hi Guys,

This might sound stupid but would like to know what is the use of tempalate in kibana? and how do I load the template in kibana? E.g. look here and how do I load this template in kibana?

Can someone please help? https://github.com/robcowart/elastiflow

[warkolm (Mark Walkom)]

You need to use Console, just paste the json in and you should be good.

[Blason (R)]

I see and no GET/POST? Simply copy/paste, right?

[warkolm (Mark Walkom)]

It still needs to be a post. If you are using curl, just copy the entire thing in and it will reformat though.

[Blason (R)]

Great...just last .POST to where I mean if you can tell me the entire query please? I know I am asking basic question but still I am learning and not aware of couple of thigs.

Thanks for bearing with me

[warkolm (Mark Walkom)]

https://www.elastic.co/guide/en/elasticsearch/reference/5.6/indices-templates.html has a fair bit of that.

But when you use Console, you are implicitly talking to the lElasticsearch cluster directly.

[Blason (R)]

Hmmmm here is error I am encountering with the template given in my github

# PUT _template/elastiflow.kibana.json

{
"error": {
"root_cause": [
{
"type": "action_request_validation_exception",
"reason": "Validation Failed: 1: template is missing;"
}
],
"type": "action_request_validation_exception",
"reason": "Validation Failed: 1: template is missing;"
},
"status": 400
}

[warkolm (Mark Walkom)]

You cannot load a file, you need to insert the contents of that into Console.

[Blason (R)]

hey I am so sorry may be we are not on same page and I am really not sure what esatly needs to be done . I would really appreciate if you can share what exactly needs to be typed in console? Please?

I have done this, is it no OK?

This json file seems to be dashboard to me!

    PUT  {
"_id": "ca480720-2fdf-11e7-9d02-3f49bde5c1d5",
"_type": "dashboard",
"_source": {
  "title": "Netflow: Flow Records",
  "hits": 0,
  "description": ""

.
.
.
.
:{"query":"*","analyze_wildcard":true}},"filter":[]}"
}
}
}