Use wildcard when defining event-time based index with Kibana 4.1.2

(Emmanuel Demey) #1

Hi everyone,

Just a quick question I have since this morning about Kibana 4.1.2.

When I configure a news index pattern, I have checked the second check box : Use event times to create index names.

According to the documentation, we have to specify the static text between brackets, and the date format outside.

Is it possible to use wildcard in this pattern ? in order to be able to define dynamic prefix ? like : [logstash-]*-YYYY.MM.DD ?

Thanks a lot



(Jon Budzenski) #2

It's not in 4.1 - see for more info. In Kibana 4.3+ this would be available.

(system) #3