# Query on kibana space.id

**URL:** <https://discuss.elastic.co/t/query-on-kibana-space-id/279255>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [July 21, 2021, 11:05am UTC](https://discuss.elastic.co/t/query-on-kibana-space-id/279255 "2021-07-21T11:05:54Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![hsdevaraja](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hsdevaraja/32/81564_2.png) [@hsdevaraja](https://discuss.elastic.co/u/hsdevaraja)\
**Post date:** [July 21, 2021, 11:05am UTC](https://discuss.elastic.co/t/query-on-kibana-space-id/279255/1 "2021-07-21T11:05:54Z")

</div>

Hi,

I was rereferring below link for setting up of Kibana spaces for logs isolation based on environment domain. We have single instance of Elastic search & Kibana(7.10.2) & Our requirement is create different Kibana spaces like DEV,TEST etc and send logs from agents(filebeat) to only specific spaces not to default spaces or all spaces.

> **[Spaces | Elastic Docs](https://www.elastic.co/docs/deploy-manage/manage-spaces)**
>
> Spaces let you organize your content and users according to your needs. Each space has its own saved objects.Users can access only the spaces that they...

Example : DEV agents should send filebeat logs to DEV Kibana space & TEST agents should send logs to TEST Kibana spaces. Please let me know is this possible with kibana spaces for separating logs based on environment domains. I tried setting kibana space.id in filebeat.yml by configuring different kibana spaces(DEV & TEST) but it has not worked by default it sends logs to all spaces eventhough we set space.id in filebeat.yml.

# Kibana Space ID

# ID of the Kibana Space into which the dashboards should be loaded. By default,

# the Default Space will be used.

space.id:test

---

<div class="post-metadata">

**Author:** ![Mario\_Castro](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mario_castro/32/35107_2.png) [@Mario\_Castro](https://discuss.elastic.co/u/Mario_Castro)\
**Post date:** [July 22, 2021, 11:08am UTC](https://discuss.elastic.co/t/query-on-kibana-space-id/279255/2 "2021-07-22T11:08:34Z")

</div>

That's because you don't send logs to spaces but to indices. Maybe this can help you [Change the index name | Filebeat Reference [7.13] | Elastic](https://www.elastic.co/guide/en/beats/filebeat/current/change-index-name.html)

---

<div class="post-metadata">

**Author:** ![hsdevaraja](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hsdevaraja/32/81564_2.png) [@hsdevaraja](https://discuss.elastic.co/u/hsdevaraja)\
**Post date:** [July 29, 2021, 1:33pm UTC](https://discuss.elastic.co/t/query-on-kibana-space-id/279255/3 "2021-07-29T13:33:42Z")

</div>

Thanks for the reply. You are saying we can send agent logs directly from filebeat to kibana spaces without sending to elastic search indices ?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 26, 2021, 3:34pm UTC](https://discuss.elastic.co/t/query-on-kibana-space-id/279255/4 "2021-08-26T15:34:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.