Kibana的一些api随记

space / 工作区

official doc: https://www.elastic.co/guide/en/kibana/current/spaces-api.html

通过kibana space可以完成如隐藏index_pattern (索引模式),针对space隐藏特定字段(但是还是能搜索),隐藏菜单 等定制化操作

在通过界面创建space检查无误后，可以通过kibana api批量创建space

Get all Kibana spaces API / 查询所有space

curl "http://kibana_url/api/spaces/space" -u root:root

curl "http://kibana_url/api/spaces/space" -u root:root -s | jq .

Create space API / 创建space

curl "http://kibana_url/api/spaces/space" -u root:root -H "kbn-version: 7.12.1" -XPOST -H "Content-Type: application/json" -d '{"id":"space-id","name":"space-name","description":"","initials":"","disabledFeatures":["siem","logs","infrastructure","apm","uptime","enterpriseSearch","advancedSettings","savedObjectsManagement","savedObjectsTagging","fleet","actions","stackAlerts","monitoring"]}'

space_info=space_name curl "http://kibana_url/api/spaces/space" -u root:root -H "kbn-version: 7.12.1" -XPOST -H "Content-Type: application/json" \
--data-binary @- << EOF
{
  "id": "${space_info}",
  "name": "${space_info}",
  "description": "${space_info}",
  "initials": "",
  "disabledFeatures": [
    "siem",
    "logs",
    "infrastructure",
    "apm",
    "uptime",
    "enterpriseSearch",
    "advancedSettings",
    "savedObjectsManagement",
    "savedObjectsTagging",
    "fleet",
    "actions",
    "stackAlerts",
    "monitoring"
  ]
}
EOF

Related: 一键创建kibana工作区(space)和对应只读角色的脚本