Kibana should suggest index patterns

[panda01]

Elasticsearch provides a list of index patterns. Kibana should use this list to make the creation and choosing of an index pattern easier.

[rashidkpc]

Elasticsearch provides a list of index names not patterns. Can you describe how this feature would work? The logic that would go into figuring out which indices are related and should be grouped together?

[panda01]

Well eventually it would be really cool if kibana made the patterns for you. But in the beginning just a simple list of the the current index names on the es cluster would be useful I think.

[LeeDr]

Just for fun, I came up with this command line;

curl -s http://elastic:changeme@localhost:9200/_cat/indices | command awk '{print $3}' | grep -v '^\.' | grep -v '.*-[0-9]\{4\}\.[0-9]\{2\}\.[0-9]\{2\}' && curl -s http://elastic:changeme@localhost:9200/_cat/indices | command awk '{print $3}' | grep -v "^\." | grep '.*-[0-9]\{4\}\.[0-9]\{2\}\.[0-9]\{2\}' | sed 's|[0-9]\{4\}\.[0-9]\{2\}\.[0-9]\{2\}|*|' | sort -u

The first half gets index patterns which don't start with . (like .kibana and the .monitoring indices) and that don't contain a timestamp like 2017.01.01
and the second half finds only the indices which do contain a timestamp and relaces that with * and does a unique sort so you don't get multiple rows with the same pattern.

My output;

dlstest
flstest
filebeat-*
logstash-*
metricbeat-*
packetbeat-*

If we're going to suggest these, it should also filter out (or mark somehow) the ones we already have as index patterns.

[chrisronline]

I think we can close this issue. We have recently developed a new experience around index pattern creation that makes it easier to see ES indices and create Kibana index patterns from them.