Generating the Beat Index Pattern

If you change the fields exported by the Beat, you need to generate a new index pattern for your Beat. Otherwise you can just use the index pattern available under the etc/kibana/index-pattern directory or in the beats-dashboards archive for the Elastic Beats.

The Beat index pattern is generated from the etc/fields.yml, where all the fields for a Beat are defined. For each field, besides the type, you can configure the format field. The format informs Kibana about how to display a certain field. A good example is percentage or bytes to display fields as 50% or 5MB.

To generate the index pattern from the etc/fields.yml, you need to run the following command in the Beat repository:

make update