Logs app settings in Kibana | Kibana Guide [7.6]

» » »

Logs app settings in Kibanaedit

You do not need to configure any settings to use the Logs app in Kibana. It is enabled by default.

xpack.infra.enabled: Set to false to disable the Logs and Metrics app plugin Kibana. Defaults to true.
xpack.infra.sources.default.logAlias: Index pattern for matching indices that contain log data. Defaults to filebeat-*,kibana_sample_data_logs*.
xpack.infra.sources.default.metricAlias: Index pattern for matching indices that contain Metricbeat data. Defaults to metricbeat-*.
xpack.infra.sources.default.fields.timestamp: Timestamp used to sort log entries. Defaults to @timestamp.
xpack.infra.sources.default.fields.message: Fields used to display messages in the Logs app. Defaults to ['message', '@message'].
xpack.infra.sources.default.fields.tiebreaker: Field used to break ties between two entries with the same timestamp. Defaults to _doc.
xpack.infra.sources.default.fields.host: Field used to identify hosts. Defaults to host.name.
xpack.infra.sources.default.fields.container: Field used to identify Docker containers. Defaults to container.id.
xpack.infra.sources.default.fields.pod: Field used to identify Kubernetes pods. Defaults to kubernetes.pod.uid.