# Time based index pattern + wildcard

**URL:** <https://discuss.elastic.co/t/time-based-index-pattern-wildcard/26053>\
**Category:** Kibana\
**Created:** [July 22, 2015, 7:59am UTC](https://discuss.elastic.co/t/time-based-index-pattern-wildcard/26053 "2015-07-22T07:59:00Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![korpa](https://avatars.discourse-cdn.com/v4/letter/k/cab0a1/32.png) [@korpa](https://discuss.elastic.co/u/korpa)\
**Post date:** [July 22, 2015, 7:59am UTC](https://discuss.elastic.co/t/time-based-index-pattern-wildcard/26053/1 "2015-07-22T07:59:00Z")

</div>

Hej,

I have multiple indices defined:

```
logstash-1-day-2015.07.20
logstash-2-day-2015.07.20
logstash-1-day-2015.07.21
logstash-2-day-2015.07.21

```

Now I wonder how to set up a timebased index pattern in Kibana. I already tried the following without luck:

```
[logstash-*-day-]YYYY.MM.DD
[logstash-]*[-day-]YYYY.MM.DD

```

Sadly [https://www.elastic.co/guide/en/kibana/current/settings.html](https://www.elastic.co/guide/en/kibana/current/settings.html) doesn't cover this case.

Hope someone can help.

Thanks

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [July 22, 2015, 3:06pm UTC](https://discuss.elastic.co/t/time-based-index-pattern-wildcard/26053/2 "2015-07-22T15:06:51Z")

</div>

I do not think wildcards are allowed in these type of patterns. If you want to query across several different time based indices, you could create an alias for each set of filters, e.g. 'alias-2015.07.20' and associate this with both 'logstash-1-day-2015.07.20' and 'logstash-2-day-2015.07.20'. You would need to manage the links between aliases and indices, but you should be able to use the alias with the date pattern in Kibana.

---

<div class="post-metadata">

**Author:** ![Mrc0113](https://avatars.discourse-cdn.com/v4/letter/m/ea666f/32.png) [@Mrc0113](https://discuss.elastic.co/u/Mrc0113)\
**Post date:** [July 22, 2015, 4:45pm UTC](https://discuss.elastic.co/t/time-based-index-pattern-wildcard/26053/3 "2015-07-22T16:45:48Z")

</div>

Does anyone know if this, or at least the ability to query multiple indices from Kibana4 is on the roadmap?

A similar question was asked here: [Search multiple indices in Kibana 4?](https://discuss.elastic.co/t/search-multiple-indices-in-kibana-4/22280)

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [July 22, 2015, 5:02pm UTC](https://discuss.elastic.co/t/time-based-index-pattern-wildcard/26053/4 "2015-07-22T17:02:14Z")

</div>

Yes, this is on the roadmap: [https://github.com/elastic/kibana/issues/2017](https://github.com/elastic/kibana/issues/2017)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:15pm UTC](https://discuss.elastic.co/t/time-based-index-pattern-wildcard/26053/5 "2017-07-06T14:15:58Z")

</div>