Kibana - how to export search results

elasticsearch kibana kibana-4 kibana-7
MachineShedFred picture MachineShedFred · Jul 28, 2015 · Viewed 20.8k times · Source

We've recently moved our centralized logging from Splunk to an ELK solution, and we have a need to export search results - is there a way to do this in Kibana 4.1? If there is, it's not exactly obvious...

Thanks!

Answer

Sean picture Sean · Jan 29, 2016

If you want to export the logs (not just the timestamp and counts), you have a couple of options (tylerjl answered this question very well on the Kibana forums):

If you're looking to actually export logs from Elasticsearch, you probably want to save them somewhere, so viewing them in the browser probably isn't the best way to view hundreds or thousands of logs. There are a couple of options here:

  • In the "Discover" tab, you can click on the arrow tab near the bottom to see the raw request and response. You could click "Request" and use that as a query to ES with curl (or something similar) to query ES for the logs you want.

  • You could use logstash or stream2es206 to dump out the contents of a index (with possible query parameters to get the specific documents you want.)

Related questions

Elasticsearch is still initializing the kibana index

When I am trying to start Kibana I am facing the following issue. I first restarted my elasticsearch server it was running successfully. After starting Elasticsearch I tried to start Kibana but no luck. {"name":"Kibana","hostname":"ABCD","pid":3848,"level":30,"…

Read More
Kibana - How to display log as table

I'm testing Kibana 4 for a project. I have created an index from my database table which is composed by 3 fields: Date User Action I would like to display my index as a simple table (3 column, N rows) in my dashboard. …

Read More
Where does Elasticsearch store its data?

So I have this Elasticsearch installation, in insert data with logstash, visualize them with kibana. Everything in the conf file is commented, so it's using the default folders which are relative to the elastic search folder. 1/ I store data with …

Read More