IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Generating the Beat Index Pattern

edit

If you change the fields exported by the Beat, you need to generate a new index pattern for your Beat. Otherwise you can just use the index pattern available under the etc/kibana/index-pattern directory or in the beats-dashboards archive for the Elastic Beats.

The Beat index pattern is generated from the etc/fields.yml, where all the fields for a Beat are defined. For each field, besides the type, you can configure the format field. The format informs Kibana about how to display a certain field. A good example is percentage or bytes to display fields as 50% or 5MB.

To generate the index pattern from the etc/fields.yml, you need to run the following command in the Beat repository:

make update