What is the ID in documents or surrounding documents links?

Elastic Stack Kibana
1

a document link:
#/doc/982353c0-ac85-11e8-a1c9-1f53c4cb4ccc/filebeat-6.4.0-2018.09.03/doc?id=IKnFoGUBdgZSH_Gx6ZcK

surrounding documents link:
#/context/982353c0-ac85-11e8-a1c9-1f53c4cb4ccc/doc/IKnFoGUBdgZSH_Gx6ZcK

The last ID IKnFoGUBdgZSH_Gx6ZcK is the document ID (doc['_id'] in a scripted field), document link also has the index name filebeat-6.4.0-2018.09.03 (doc['_index'] in a scripted field).

What is the starting uuid 982353c0-ac85-11e8-a1c9-1f53c4cb4ccc? And how to access it from a scripted field?

Those links are accessible from the Discover tab:

2018-09-02-002129_1110x220_scrot
2018-09-02-002129_1110x220_scrot.png1152×256 46.7 KB

2

Hi @caub,

the uuid is the id that Kibana assigned the underlying index pattern. It is not part of the document and as such not accessible in a scripted field.

3

@weltenwort Thanks for the explanations

I've hardcoded it in my scripted field for now, can this ID change?

2018-09-04-082442_844x972_scrot
2018-09-04-082442_844x972_scrot.png844×972 50.5 KB

4

The id does not change once the index pattern has been created. By default, Kibana assigns a random uuid during creation. The id can also be manually specified via the Advanced Options in the index pattern creation wizard:

image
image.png517×543 45.2 KB

So you have to take care that the correct id is specified when creating the index pattern or when restoring from a backup.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.