{"id":7388,"date":"2021-02-24T22:26:07","date_gmt":"2021-02-24T19:26:07","guid":{"rendered":"https:\/\/kifarunix.com\/?p=7388"},"modified":"2024-03-19T19:25:57","modified_gmt":"2024-03-19T16:25:57","slug":"update-change-kibana-visualization-index-pattern","status":"publish","type":"post","link":"https:\/\/kifarunix.com\/update-change-kibana-visualization-index-pattern\/","title":{"rendered":"Update\/Change Kibana Visualization Index Pattern"},"content":{"rendered":"\n

In this tutorial, you will learn how to update\/change kibana visualization index pattern. Kibana<\/a> is a free and open user interface that lets you visualize your Elasticsearch data and navigate the Elastic Stack.<\/em> Sometimes, the index pattern in which you use to visualize your various event data on Kibana may change for some reasons. This usually leads to being unable to visualize the data.<\/p>\n\n\n\n

See example errors below in the screenshot below that results due to the changes on the Kibana index patterns.<\/p>\n\n\n\n

Sample dashboard errors;<\/p>\n\n\n\n

Could not locate that index-pattern<\/strong><\/code><\/pre>\n\n\n
\n
\"\"<\/figure><\/div>\n\n\n
Saved object is missing<\/strong><\/code><\/pre>\n\n\n\n
\"Update\/Change<\/figure>\n\n\n\n
Changing Kibana Visualization Index Pattern<\/h2>\n\n\n\n
So how can you change Kibana visualization index pattern? Visualization is usually based on the fields extracted from the indexed event data. So assuming that, the index from which you created the pattern from still exists and that the fields on the event data have not changed, you can easily change the visualization index pattern and continue enjoying Kibana visualizations.<\/p>\n\n\n\n
There are two methods you can use to update the visualization index pattern depending on the number of visualizations you already have.<\/p>\n\n\n\n
    \n
  1. Changing the index pattern ID under the Saved Object settings if you have few visualizations<\/a><\/li>\n\n\n\n
  2. Exporting the visualization json file and recursively change the index pattern ID and re-import<\/a><\/li>\n<\/ol>\n\n\n\n
    Updating Index Pattern ID under Saved Object settings<\/h3>\n\n\n\n
    If you have fewer visualizations, it is easier to update their index pattern id via the Saved Object settings.<\/p>\n\n\n\n
    To access Kibana Saved Object settings, navigate to Kibana Management > Stack Management > Kibana > Saved Objects<\/strong>.<\/p>\n\n\n\n
    Search for the specific visualization that you need to update the index pattern, see example below.<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    Click on the visualization in question to edit it and update\/change the index pattern name.<\/p>\n\n\n\n
    On the edit page, scroll down to references<\/code><\/strong> section.<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    Delete the index ID, which in the screenshot above is, 59ff9b10-d27d-11ea-99f7-c5571c2fcad7<\/strong>, and replace it with the new index pattern name.<\/p>\n\n\n\n
    You can obtain the new index pattern from the URL. simply navigate to Management > Stack Management > Kibana > Index Pattern > Click on the appropriate index pattern > Obtain the ID from URL<\/strong>.<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    Copy the index pattern ID from the URL and replace it on the visualization editing page;<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    Once done, click Save visualization Object<\/strong> to update the Kibana visualization index pattern ID.<\/p>\n\n\n\n
    You visualization should now be restored.<\/p>\n\n\n\n
    Exporting Visualization Json file<\/h3>\n\n\n\n
    If you have a huge number of visualizations that uses the same index and you need to update or change their index patterns, simply;<\/p>\n\n\n\n