Creating an Index Pattern to Connect to Elasticsearch

1. In Kibana, in the Management tab, click Index Patterns. The Index Patterns tab is displayed.
2. Click Add New. The Configure an index pattern section is displayed.
3. Specify an index pattern that matches the name of one or more of your Elasticsearch indices. By default, Kibana guesses that you’re working with log data fed into Elasticsearch by Logstash, so it proposes "logstash-*".
4. Enter the name of the tenant. The default tenant name is "default", so please enter this: default*.
   Note: The index name is correct only if the green Create button is displayed.

   
   

   

   
   
5. Important! If your index contains a timestamp field that you want to use to perform time-based comparisons, select the Index contains time-based events option. Proceed by selecting the index field that contains the timestamp. Kibana reads the index mapping to list all the fields that contain a timestamp.
   
   

   

   
   
6. Ensure the Do not expand index pattern when searching option is not selected. By default, Kibana restricts wildcard expansion of time-based index patterns to indices with data within the currently selected time range.
7. Set @timeStamp as the Time-field name.
8. Click Create to add the index pattern.