kibana commands

15 commands, each with a one-line explanation. Click a command to copy it, or its title for details.

Commands 15 shown

  • Export dashboard
    curl -s 'http://kibana:5601/api/saved_objects/_export' -H 'kbn-xsrf: true' -H 'Content-Type: application/json' -d '{"type":"dashboard","includeReferencesDeep":true}' -o dashboard.ndjson

    Export a Kibana dashboard with all dependencies

  • Import dashboard
    curl -X POST 'http://kibana:5601/api/saved_objects/_import' -H 'kbn-xsrf: true' --form file=@dashboard.ndjson

    Import a previously exported dashboard

  • KQL: filter by field value
    status: 404 AND method: GET

    Kibana Query Language — filter logs by field values

  • KQL: range query
    response_time > 500 AND @timestamp > now-1h

    Filter events in the last hour with slow responses

    monitoring

  • KQL: wildcard search
    message: *OOMKilled*

    Wildcard match in a field value

    debug

  • KQL: nested field filter
    kubernetes.pod.name: web-* AND kubernetes.namespace: prod

    Filter by nested Kubernetes metadata fields

    debug

  • Create index pattern via API
    curl -X POST http://kibana:5601/api/saved_objects/index-pattern -H 'kbn-xsrf: true' -H 'Content-Type: application/json' -d '{"attributes":{"title":"logs-*","timeFieldName":"@timestamp"}}'

    Register a new index pattern via Kibana REST API

  • Export saved objects
    curl -X POST http://kibana:5601/api/saved_objects/_export -H 'kbn-xsrf: true' -H 'Content-Type: application/json' -d '{"type":["dashboard","visualization"],"includeReferencesDeep":true}' -o export.ndjson

    Export dashboards and visualizations to NDJSON

  • Import saved objects
    curl -X POST http://kibana:5601/api/saved_objects/_import?overwrite=true -H 'kbn-xsrf: true' -F file=@export.ndjson

    Import dashboards/visualizations from NDJSON

  • Check Kibana health
    curl -s http://kibana:5601/api/status | jq '{status: .status.overall.level, version: .version.number}'

    Overall health status and Kibana version

    monitoring

  • List all index patterns
    curl -s http://kibana:5601/api/saved_objects/_find?type=index-pattern | jq '.saved_objects[].attributes.title'

    Show all registered index patterns

  • Dev Tools console query
    GET logs-*/_search { "query": {"match": {"level": "error"}}, "size": 10 }

    Run Elasticsearch queries directly in Kibana Dev Tools

    elasticsearch · debug

  • Flush Kibana cache
    curl -X DELETE http://kibana:5601/api/saved_objects/config/7.17.0 -H 'kbn-xsrf: true'

    Reset Kibana config object (triggers re-init on reload)

    debug

  • Get space info
    curl -s http://kibana:5601/api/spaces/space | jq '.[].id'

    List all Kibana Spaces by ID

  • Copy objects between spaces
    curl -X POST http://kibana:5601/api/spaces/_copy_saved_objects -H 'kbn-xsrf: true' -H 'Content-Type: application/json' -d '{"spaces":["staging"],"objects":[{"type":"dashboard","id":"my-dash"}],"overwrite":true}'

    Copy a dashboard to another Kibana Space