mirror of
https://github.com/elastic/kibana.git
synced 2025-04-23 17:28:26 -04:00
[DOCS] Adds advanced settings for data views (#130294)
* Adds advanced settings for data views * Update docs/concepts/data-views.asciidoc Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com> Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com> Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
This commit is contained in:
parent
b3538f8345
commit
1dcdc7b0de
1 changed files with 29 additions and 25 deletions
|
@ -1,11 +1,11 @@
|
|||
[[data-views]]
|
||||
=== Create a data view
|
||||
=== Create a {data-source}
|
||||
|
||||
{kib} requires a data view to access the {es} data that you want to explore.
|
||||
A data view selects the data to use and allows you to define properties of the fields.
|
||||
{kib} requires a {data-source} to access the {es} data that you want to explore.
|
||||
A {data-source} selects the data to use and allows you to define properties of the fields.
|
||||
|
||||
A data view can point to one or more indices, {ref}/data-streams.html[data stream], or {ref}/alias.html[index aliases].
|
||||
For example, a data view can point to your log data from yesterday,
|
||||
A {data-source} can point to one or more indices, {ref}/data-streams.html[data streams], or {ref}/alias.html[index aliases].
|
||||
For example, a {data-source} can point to your log data from yesterday,
|
||||
or all indices that contain your data.
|
||||
|
||||
[float]
|
||||
|
@ -15,12 +15,12 @@ or all indices that contain your data.
|
|||
* Access to *Data Views* requires the <<kibana-role-management, {kib} privilege>>
|
||||
`Data View Management`.
|
||||
|
||||
* To create a data view, you must have the <<kibana-role-management,{es} privilege>>
|
||||
* To create a {data-source}, you must have the <<kibana-role-management,{es} privilege>>
|
||||
`view_index_metadata`.
|
||||
|
||||
* If a read-only indicator appears in {kib}, you have insufficient privileges
|
||||
to create or save data views. The buttons to create new data views or
|
||||
save existing data views are not visible. For more information,
|
||||
to create or save {data-sources}. The buttons to create {data-sources} or
|
||||
save existing {data-sources} are not visible. For more information,
|
||||
refer to <<xpack-security-authorization,Granting access to {kib}>>.
|
||||
|
||||
[float]
|
||||
|
@ -29,12 +29,12 @@ refer to <<xpack-security-authorization,Granting access to {kib}>>.
|
|||
|
||||
If you collected data using one of the {kib} <<connect-to-elasticsearch,ingest options>>,
|
||||
uploaded a file, or added sample data,
|
||||
you get a data view for free, and can start exploring your data.
|
||||
If you loaded your own data, follow these steps to create a data view.
|
||||
you get a {data-source} for free, and can start exploring your data.
|
||||
If you loaded your own data, follow these steps to create a {data-source}.
|
||||
|
||||
. Open the main menu, then click *Stack Management > Data Views*.
|
||||
|
||||
. Click *Create data view*.
|
||||
. Click *Create {data-source}*.
|
||||
|
||||
. Start typing in the *name* field, and {kib} looks for the names of
|
||||
indices, data streams, and aliases that match your input.
|
||||
|
@ -61,21 +61,25 @@ global time filters on your dashboards. This is useful if
|
|||
you have multiple time fields and want to create dashboards that combine visualizations
|
||||
based on different timestamps.
|
||||
|
||||
. Click *Create data view*.
|
||||
. To display all indices, click *Show advanced settings*, then select *Allow hidden and system indices*.
|
||||
|
||||
. To specify your own {data-source} name, click *Show advanced settings*, then enter the name in the *Custom {data-source} ID* field. For example, enter your {es} index alias name.
|
||||
|
||||
. Click *Create {data-source}*.
|
||||
+
|
||||
[[reload-fields]] {kib} is now configured to use your {es} data. When a new field is added to an index,
|
||||
the data view field list is updated
|
||||
the next time the data view is loaded, for example, when you load the page or
|
||||
the {data-source} field list is updated
|
||||
the next time the {data-source} is loaded, for example, when you load the page or
|
||||
move between {kib} apps.
|
||||
|
||||
. Select this data view when you search and visualize your data.
|
||||
. Select this {data-source} when you search and visualize your data.
|
||||
|
||||
[float]
|
||||
[[rollup-data-view]]
|
||||
==== Create a data view for rolled up data
|
||||
|
||||
A data view can match one rollup index. For a combination rollup
|
||||
data view with both raw and rolled up data, use the standard notation:
|
||||
A {data-source} can match one rollup index. For a combination rollup
|
||||
{data-source} with both raw and rolled up data, use the standard notation:
|
||||
|
||||
```ts
|
||||
rollup_logstash,kibana_sample_data_logs
|
||||
|
@ -130,20 +134,20 @@ To exclude a cluster having a name starting with `cluster_`:
|
|||
`cluster_*:logstash-*,cluster_one:-*`
|
||||
```
|
||||
|
||||
Once you configure a data view to use the {ccs} syntax, all searches and
|
||||
aggregations using that data view in {kib} take advantage of {ccs}.
|
||||
Once you configure a {data-source} to use the {ccs} syntax, all searches and
|
||||
aggregations using that {data-source} in {kib} take advantage of {ccs}.
|
||||
|
||||
[float]
|
||||
[[delete-data-view]]
|
||||
=== Delete data views
|
||||
=== Delete {data-sources}
|
||||
|
||||
When you delete a data view, you cannot recover the associated field formatters, runtime fields, source filters,
|
||||
and field popularity data. Deleting a data view does not remove any indices or data documents from {es}.
|
||||
When you delete a {data-source}, you cannot recover the associated field formatters, runtime fields, source filters,
|
||||
and field popularity data. Deleting a {data-source} does not remove any indices or data documents from {es}.
|
||||
|
||||
WARNING: Deleting a data view breaks all visualizations, saved searches, and other saved objects that reference the data view.
|
||||
WARNING: Deleting a {data-source} breaks all visualizations, saved searches, and other saved objects that reference the data view.
|
||||
|
||||
. Open the main menu, then click *Stack Management > Data Views*.
|
||||
|
||||
. Click the data view to delete.
|
||||
. Click the {data-source} to delete.
|
||||
|
||||
. Delete (image:management/index-patterns/images/delete.png[Delete icon]) the data view.
|
||||
. Delete (image:management/index-patterns/images/delete.png[Delete icon]) the {data-source}.
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue