Defining Index Patterns in Kibana 7.6

30 minutes
  • 5 Learning Objectives

About this Hands-on Lab

Before you can analyze the data in your Elasticsearch indices, we first need to tell Kibana what data to look at, how to categorize it, and even how to format the data in order for it to be as readable as possible. In this hands-on lab, you will get to define index patterns for various indices, and customize field formatting for readability.

Learning Objectives

Successfully complete this lab by achieving the following learning objectives:

Define the `ecommerce` Index Pattern
  1. Navigate to Management > Index Patterns to create a new pattern.
  2. Create the ecommerce index pattern using order_date as the time filter field.
Define the `flights` Index Pattern
  1. Navigate to Management > Index Patterns to create a new pattern.
  2. Create the flights index pattern using timestamp as the time filter field.
  3. Edit the AvgTicketPrice field to display as a comma separated number with 2 decimal places and a leading dollar sign.
Define the `logs` Index Pattern
  1. Navigate to Management > Index Patterns to create a new pattern.
  2. Create the logs index pattern using @timestamp as the time filter field.
  3. Edit the bytes and machine.ram fields to display with the appropriate formatting.
  4. Set the index pattern as the default.
Define the `filebeat` Index Pattern
  1. Navigate to Management > Index Patterns to create a new pattern.
  2. Create the filebeat index pattern using @timestamp as the time filter field.
Define the `metricbeat` Index Pattern
  1. Navigate to Management > Index Patterns to create a new pattern.
  2. Create the metricbeat index pattern using @timestamp as the time filter field.

Additional Resources

You manage an Elastic Stack that contains several different kinds of data used by various departments at your company. As the administrator, you will need to create the following index patterns in Kibana, so that the data can be accessible in order to enable the creation of visualizations and dashboards:

ecommerce

  • Matches the kibana_sample_data_ecommerce index.
  • Uses order_date as the time filter field.

flights

  • Matches the kibana_sample_data_flights index.
  • Uses timestamp as the time filter field.
  • Formats the AvgTicketPrice field as a comma separated number with 2 decimal places and a leading dollar sign.

logs

  • Matches the kibana_sample_data_logs index.
  • Uses @timestamp as the time filter field.
  • Formats the bytes and machine.ram fields as human readable bytes numbers.
  • This index pattern should be set as the default.

filebeat

  • Matches any index that starts with filebeat-.
  • Uses @timestamp as the time filter field.

metricbeat

  • Matches any index that starts with metricbeat-.
  • Uses @timestamp as the time filter field.

Your es1 node has an Kibana instance which can be accessed in your local web browser by navigating to the public IP address of the es1 node over port 8080 (example: http://public_ip:8080). To log in, use the elastic user with the password elastic_acg.

What are Hands-on Labs

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Sign In
Welcome Back!

Psst…this one if you’ve been moved to ACG!

Get Started
Who’s going to be learning?