Skip to content

Commit

Permalink
[DOCS] Adds advanced settings for data views (#130294) (#130689)
Browse files Browse the repository at this point in the history
* Adds advanced settings for data views

* Update docs/concepts/data-views.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
(cherry picked from commit 1dcdc7b)

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
  • Loading branch information
kibanamachine and KOTungseth authored Apr 20, 2022
1 parent 25e6bb2 commit 08565fd
Showing 1 changed file with 29 additions and 25 deletions.
54 changes: 29 additions & 25 deletions docs/concepts/data-views.asciidoc
Original file line number Diff line number Diff line change
@@ -1,11 +1,11 @@
[[data-views]]
=== Create a data view
=== Create a {data-source}

{kib} requires a data view to access the {es} data that you want to explore.
A data view selects the data to use and allows you to define properties of the fields.
{kib} requires a {data-source} to access the {es} data that you want to explore.
A {data-source} selects the data to use and allows you to define properties of the fields.

A data view can point to one or more indices, {ref}/data-streams.html[data stream], or {ref}/alias.html[index aliases].
For example, a data view can point to your log data from yesterday,
A {data-source} can point to one or more indices, {ref}/data-streams.html[data streams], or {ref}/alias.html[index aliases].
For example, a {data-source} can point to your log data from yesterday,
or all indices that contain your data.

[float]
Expand All @@ -15,12 +15,12 @@ or all indices that contain your data.
* Access to *Data Views* requires the <<kibana-role-management, {kib} privilege>>
`Data View Management`.

* To create a data view, you must have the <<kibana-role-management,{es} privilege>>
* To create a {data-source}, you must have the <<kibana-role-management,{es} privilege>>
`view_index_metadata`.

* If a read-only indicator appears in {kib}, you have insufficient privileges
to create or save data views. The buttons to create new data views or
save existing data views are not visible. For more information,
to create or save {data-sources}. The buttons to create {data-sources} or
save existing {data-sources} are not visible. For more information,
refer to <<xpack-security-authorization,Granting access to {kib}>>.

[float]
Expand All @@ -29,12 +29,12 @@ refer to <<xpack-security-authorization,Granting access to {kib}>>.

If you collected data using one of the {kib} <<connect-to-elasticsearch,ingest options>>,
uploaded a file, or added sample data,
you get a data view for free, and can start exploring your data.
If you loaded your own data, follow these steps to create a data view.
you get a {data-source} for free, and can start exploring your data.
If you loaded your own data, follow these steps to create a {data-source}.

. Open the main menu, then click *Stack Management > Data Views*.

. Click *Create data view*.
. Click *Create {data-source}*.

. Start typing in the *name* field, and {kib} looks for the names of
indices, data streams, and aliases that match your input.
Expand All @@ -61,21 +61,25 @@ global time filters on your dashboards. This is useful if
you have multiple time fields and want to create dashboards that combine visualizations
based on different timestamps.

. Click *Create data view*.
. To display all indices, click *Show advanced settings*, then select *Allow hidden and system indices*.

. To specify your own {data-source} name, click *Show advanced settings*, then enter the name in the *Custom {data-source} ID* field. For example, enter your {es} index alias name.

. Click *Create {data-source}*.
+
[[reload-fields]] {kib} is now configured to use your {es} data. When a new field is added to an index,
the data view field list is updated
the next time the data view is loaded, for example, when you load the page or
the {data-source} field list is updated
the next time the {data-source} is loaded, for example, when you load the page or
move between {kib} apps.

. Select this data view when you search and visualize your data.
. Select this {data-source} when you search and visualize your data.

[float]
[[rollup-data-view]]
==== Create a data view for rolled up data

A data view can match one rollup index. For a combination rollup
data view with both raw and rolled up data, use the standard notation:
A {data-source} can match one rollup index. For a combination rollup
{data-source} with both raw and rolled up data, use the standard notation:

```ts
rollup_logstash,kibana_sample_data_logs
Expand Down Expand Up @@ -130,20 +134,20 @@ To exclude a cluster having a name starting with `cluster_`:
`cluster_*:logstash-*,cluster_one:-*`
```

Once you configure a data view to use the {ccs} syntax, all searches and
aggregations using that data view in {kib} take advantage of {ccs}.
Once you configure a {data-source} to use the {ccs} syntax, all searches and
aggregations using that {data-source} in {kib} take advantage of {ccs}.

[float]
[[delete-data-view]]
=== Delete data views
=== Delete {data-sources}

When you delete a data view, you cannot recover the associated field formatters, runtime fields, source filters,
and field popularity data. Deleting a data view does not remove any indices or data documents from {es}.
When you delete a {data-source}, you cannot recover the associated field formatters, runtime fields, source filters,
and field popularity data. Deleting a {data-source} does not remove any indices or data documents from {es}.

WARNING: Deleting a data view breaks all visualizations, saved searches, and other saved objects that reference the data view.
WARNING: Deleting a {data-source} breaks all visualizations, saved searches, and other saved objects that reference the data view.

. Open the main menu, then click *Stack Management > Data Views*.

. Click the data view to delete.
. Click the {data-source} to delete.

. Delete (image:management/index-patterns/images/delete.png[Delete icon]) the data view.
. Delete (image:management/index-patterns/images/delete.png[Delete icon]) the {data-source}.

0 comments on commit 08565fd

Please sign in to comment.