KQL: nested field filter

Filter by nested Kubernetes metadata fields

kubernetes.pod.name: web-* AND kubernetes.namespace: prod
tool
kibana15 commands
tags
kibanadebug

More kibana commands

  • Create index pattern via API
    curl -X POST http://kibana:5601/api/saved_objects/index-pattern -H 'kbn-xsrf: true' -H 'Content-Type: application/json' -d '{"attributes":{"title":"logs-*","timeFieldName":"@timestamp"}}'

    Register a new index pattern via Kibana REST API

  • Export saved objects
    curl -X POST http://kibana:5601/api/saved_objects/_export -H 'kbn-xsrf: true' -H 'Content-Type: application/json' -d '{"type":["dashboard","visualization"],"includeReferencesDeep":true}' -o export.ndjson

    Export dashboards and visualizations to NDJSON

  • Import saved objects
    curl -X POST http://kibana:5601/api/saved_objects/_import?overwrite=true -H 'kbn-xsrf: true' -F file=@export.ndjson

    Import dashboards/visualizations from NDJSON

  • Check Kibana health
    curl -s http://kibana:5601/api/status | jq '{status: .status.overall.level, version: .version.number}'

    Overall health status and Kibana version

  • List all index patterns
    curl -s http://kibana:5601/api/saved_objects/_find?type=index-pattern | jq '.saved_objects[].attributes.title'

    Show all registered index patterns

all 15 kibana commands