IMPORTANT: No additional bug fixes or documentation updates
will be released for this version. For the latest information, see the
current release documentation.
Logs settings in Kibana
editLogs settings in Kibana
editYou do not need to configure any settings to use the Logs app in Kibana. It is enabled by default.
General Logs settings
edit-
xpack.infra.enabled -
[7.16.0]
Deprecated in 7.16.0. In 8.0 and later, this setting will no longer be supported.
Set to
falseto disable the Logs and Metrics app plugin Kibana. Defaults totrue. -
xpack.infra.sources.default.logAlias -
Index pattern for matching indices that contain log data. Defaults to
filebeat-*,kibana_sample_data_logs*. To match multiple wildcard patterns, use a comma to separate the names, with no space after the comma. For example,logstash-app1-*,default-logs-*. -
xpack.infra.sources.default.metricAlias -
Index pattern for matching indices that contain Metricbeat data. Defaults to
metricbeat-*. To match multiple wildcard patterns, use a comma to separate the names, with no space after the comma. For example,logstash-app1-*,default-logs-*. -
xpack.infra.sources.default.fields.timestamp -
Timestamp used to sort log entries. Defaults to
@timestamp. -
xpack.infra.sources.default.fields.message -
Fields used to display messages in the Logs app. Defaults to
['message', '@message']. -
xpack.infra.sources.default.fields.tiebreaker -
Field used to break ties between two entries with the same timestamp. Defaults to
_doc. -
xpack.infra.sources.default.fields.host -
Field used to identify hosts. Defaults to
host.name. -
xpack.infra.sources.default.fields.container -
Field used to identify Docker containers. Defaults to
container.id. -
xpack.infra.sources.default.fields.pod -
Field used to identify Kubernetes pods. Defaults to
kubernetes.pod.uid.