-
Notifications
You must be signed in to change notification settings - Fork 8.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove sample data index from default centralized logs setting #195867
Labels
Team:obs-ux-logs
Observability Logs User Experience Team
Comments
Pinging @elastic/obs-ux-logs-team (Team:obs-ux-logs) |
flash1293
added a commit
that referenced
this issue
Dec 4, 2024
kibanamachine
pushed a commit
to kibanamachine/kibana
that referenced
this issue
Dec 4, 2024
Closes elastic#195867 (cherry picked from commit a6f5017)
SoniaSanzV
pushed a commit
to SoniaSanzV/kibana
that referenced
this issue
Dec 9, 2024
SoniaSanzV
pushed a commit
to SoniaSanzV/kibana
that referenced
this issue
Dec 9, 2024
CAWilson94
pushed a commit
to CAWilson94/kibana
that referenced
this issue
Dec 9, 2024
Samiul-TheSoccerFan
pushed a commit
to Samiul-TheSoccerFan/kibana
that referenced
this issue
Dec 10, 2024
CAWilson94
pushed a commit
to CAWilson94/kibana
that referenced
this issue
Dec 12, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Currently the default value for
observability:logSources
islogs-*-*, logs-*, filebeat-*, kibana_sample_data_logs*
.As it's used as the default data source in Logs explorer and it's possible to carry this value over to ESQL, it's very easy to run into the following case:
While there is a good reason for keeping filebeat as a default value in there (lots of users have data in this set of index patterns), it should be very rare that users actually want to query
kibana_sample_data_logs
- the inclusion has mostly historical reasons because the synthetic sample data used to be a much more prominent feature in Kibana.As it's adding to the noise and the risk of breaking actual use cases is extremely small, it should be removed from the default value.
The text was updated successfully, but these errors were encountered: