Logs settings in Kibanaedit
You do not need to configure any settings to use the Logs app in Kibana. It is enabled by default.
General Logs settingsedit
-
xpack.infra.enabled -
[7.16.0]
Deprecated in 7.16.0. In 8.0 and later, this setting will no longer be supported.
Set to
falseto disable the Logs and Metrics app plugin Kibana. Defaults totrue. -
xpack.infra.sources.default.logAlias -
Index pattern for matching indices that contain log data. Defaults to
filebeat-*,kibana_sample_data_logs*. To match multiple wildcard patterns, use a comma to separate the names, with no space after the comma. For example,logstash-app1-*,default-logs-*. -
xpack.infra.sources.default.metricAlias -
Index pattern for matching indices that contain Metricbeat data. Defaults to
metricbeat-*. To match multiple wildcard patterns, use a comma to separate the names, with no space after the comma. For example,logstash-app1-*,default-logs-*. -
xpack.infra.sources.default.fields.timestamp -
Timestamp used to sort log entries. Defaults to
@timestamp. -
xpack.infra.sources.default.fields.message -
Fields used to display messages in the Logs app. Defaults to
['message', '@message']. -
xpack.infra.sources.default.fields.tiebreaker -
Field used to break ties between two entries with the same timestamp. Defaults to
_doc. -
xpack.infra.sources.default.fields.host -
Field used to identify hosts. Defaults to
host.name. -
xpack.infra.sources.default.fields.container -
Field used to identify Docker containers. Defaults to
container.id. -
xpack.infra.sources.default.fields.pod -
Field used to identify Kubernetes pods. Defaults to
kubernetes.pod.uid.