CODEWITHSUNDEEP
elasticsearchkibanakibana-4
Tomáš Fejfar
Tomáš Fejfar

Reputation: 11217

How to create complex filters in Kibana 4?

I have Kibana 4 set up and now I want to "hotlink" to some concrete search results in "Discover".

I want something like (_type:"php_error_log" AND project:my_project) OR (_type:"nginx_error_log" AND project:my_project) OR (_type:"sql_slow_log" AND database:"db_my_project"). I could use queries, but that is annoying as it highlights the filtered items in the list. Also it would be easier for users to query for the thing they're looking for using the search box while having all the "jibberish" (i.e. other system logs and so) filtered out by the filter.

Is it possible? I couldn't find anything in the docs.

The use case is to hotlink to search results from out internal tools and show aggregated logs from multiple sources related to the project.

Upvotes: 1

Views: 747

Answers (1)

Alain Collins
Alain Collins

Reputation: 16362

If I understand your question correctly, you want to default kibana with a set of filters, but not have them be obvious to your users.

For that, I would suggest that you create a filtered alias, which will look like a regular index, but it will include your pre-defined filters automatically.

Upvotes: 1

Related Questions