After reindexing. what needs to be done for alerts and dashboard?

Whoami1980
Wed, 25 Mar 2026 06:59:32 +0000
Kibana

We are re-indexing our indices and giving it a new name lets say "indicies_name_v2"

I suppose this will have impact to our alerts and dashboard

Correct me if i am wrong. For alerts i suppose this is what we need to do

1. Query alerts for all Data view being used

2. Query above data view so as to know all matching sources

3. Add the new indices to the appropriate data view

Anything else to be done?

May i also know what is the elastic default index pattern for alerts to query?

i have tried using "alerts-default.alerts-*"

but i am unable to retrieve the "data view" in the "Rule definition"

For dashboard is there any advice to do so?

1 post - 1 participant