Kibana的一些api随记：修订间差异

来自三线的随记
可视化wikitext
小无编辑摘要
小无编辑摘要
 
（未显示同一用户的3个中间版本）
第12行： 第12行：


==== Create space API / 创建space ====
==== Create space API / 创建space ====
curl "<nowiki>http://kibana_url/api/spaces/space</nowiki>" -u root:root -H "kbn-version: 7.12.1" -XPOST -H "Content-Type: application/json" -d '{"id":"space-id","name":"space-name","description":"","initials":"","disabledFeatures":["siem","logs","infrastructure","apm","uptime","enterpriseSearch","advancedSettings","savedObjectsManagement","savedObjectsTagging","fleet","actions","stackAlerts","monitoring"]}'
<pre><nowiki>curl "http://kibana_url/api/spaces/space" -u root:root -H "kbn-version: 7.12.1" -XPOST -H "Content-Type: application/json" -d '{"id":"space-id","name":"space-name","description":"","initials":"","disabledFeatures":["siem","logs","infrastructure","apm","uptime","enterpriseSearch","advancedSettings","savedObjectsManagement","savedObjectsTagging","fleet","actions","stackAlerts","monitoring"]}'</nowiki></pre>
space_info=space_name curl "<nowiki>http://kibana_url/api/spaces/space</nowiki>" -u root:root -H "kbn-version: 7.12.1" -XPOST -H "Content-Type: application/json" \  
<pre><nowiki>space_info=space_name curl "http://kibana_url/api/spaces/space" -u root:root -H "kbn-version: 7.12.1" -XPOST -H "Content-Type: application/json" \
--data-binary @- << EOF
--data-binary @- << EOF
{
{
  "id": "${space_info}",
  "id": "${space_info}",
  "name": "${space_info}",
  "name": "${space_info}",
  "description": "${space_info}",
  "description": "${space_info}",
  "initials": "",
  "initials": "",
  "disabledFeatures": [
  "disabledFeatures": [
    "siem",
    "siem",
    "logs",
    "logs",
    "infrastructure",
    "infrastructure",
    "apm",
    "apm",
    "uptime",
    "uptime",
    "enterpriseSearch",
    "enterpriseSearch",
    "advancedSettings",
    "advancedSettings",
    "savedObjectsManagement",
    "savedObjectsManagement",
    "savedObjectsTagging",
    "savedObjectsTagging",
    "fleet",
    "fleet",
    "actions",
    "actions",
    "stackAlerts",
    "stackAlerts",
    "monitoring"
    "monitoring"
  ]
  ]
}
}
EOF
EOF
</nowiki></pre>Related: [[一键创建kibana工作区(space)和对应只读角色的脚本]]
[[分类:Kibana]]
[[分类:Kibana]]
[[分类:Efk]]
[[分类:Efk]]

2023年1月11日 (三) 01:07的最新版本

space / 工作区

official doc: https://www.elastic.co/guide/en/kibana/current/spaces-api.html

通过kibana space可以完成如隐藏index_pattern (索引模式),针对space隐藏特定字段(但是还是能搜索),隐藏菜单 等定制化操作

在通过界面创建space检查无误后，可以通过kibana api批量创建space

Get all Kibana spaces API / 查询所有space

curl "http://kibana_url/api/spaces/space" -u root:root

curl "http://kibana_url/api/spaces/space" -u root:root -s | jq .

Create space API / 创建space

curl "http://kibana_url/api/spaces/space" -u root:root -H "kbn-version: 7.12.1" -XPOST -H "Content-Type: application/json" -d '{"id":"space-id","name":"space-name","description":"","initials":"","disabledFeatures":["siem","logs","infrastructure","apm","uptime","enterpriseSearch","advancedSettings","savedObjectsManagement","savedObjectsTagging","fleet","actions","stackAlerts","monitoring"]}'
space_info=space_name curl "http://kibana_url/api/spaces/space" -u root:root -H "kbn-version: 7.12.1" -XPOST -H "Content-Type: application/json" \
--data-binary @- << EOF
{
  "id": "${space_info}",
  "name": "${space_info}",
  "description": "${space_info}",
  "initials": "",
  "disabledFeatures": [
    "siem",
    "logs",
    "infrastructure",
    "apm",
    "uptime",
    "enterpriseSearch",
    "advancedSettings",
    "savedObjectsManagement",
    "savedObjectsTagging",
    "fleet",
    "actions",
    "stackAlerts",
    "monitoring"
  ]
}
EOF

Related: 一键创建kibana工作区(space)和对应只读角色的脚本

取自“https://wiki.sanxian.tech/index.php?title=Kibana的一些api随记&oldid=1368”