Use wildcard when defining event-time based index with Kibana 4.1.2

Elastic Stack Kibana
1

Hi everyone,

Just a quick question I have since this morning about Kibana 4.1.2.

When I configure a news index pattern, I have checked the second check box : Use event times to create index names.

According to the documentation, we have to specify the static text between brackets, and the date format outside.

Is it possible to use wildcard in this pattern ? in order to be able to define dynamic prefix ? like : [logstash-]*-YYYY.MM.DD ?

Thanks a lot

Regards

Manu

2

It's not in 4.1 - see https://github.com/elastic/kibana/issues/4465 for more info. In Kibana 4.3+ this would be available.