Kibana的一些api随记:修订间差异

来自三线的随记
无编辑摘要
无编辑摘要
第12行: 第12行:


==== Create space API / 创建space ====
==== Create space API / 创建space ====
curl "<nowiki>http://kibana_url/api/spaces/space</nowiki>" -u root:root -H "kbn-version: 7.12.1" -XPOST -H "Content-Type: application/json" -d '{"id":"space-id","name":"space-name","description":"","initials":"","disabledFeatures":["siem","logs","infrastructure","apm","uptime","enterpriseSearch","advancedSettings","savedObjectsManagement","savedObjectsTagging","fleet","actions","stackAlerts","monitoring"]}'
<pre><nowiki>curl "http://kibana_url/api/spaces/space" -u root:root -H "kbn-version: 7.12.1" -XPOST -H "Content-Type: application/json" -d '{"id":"space-id","name":"space-name","description":"","initials":"","disabledFeatures":["siem","logs","infrastructure","apm","uptime","enterpriseSearch","advancedSettings","savedObjectsManagement","savedObjectsTagging","fleet","actions","stackAlerts","monitoring"]}'</nowiki></pre>
space_info=space_name curl "<nowiki>http://kibana_url/api/spaces/space</nowiki>" -u root:root -H "kbn-version: 7.12.1" -XPOST -H "Content-Type: application/json" \  
<pre><nowiki>space_info=space_name curl "http://kibana_url/api/spaces/space" -u root:root -H "kbn-version: 7.12.1" -XPOST -H "Content-Type: application/json" \  
  --data-binary @- << EOF
  --data-binary @- << EOF
{
{
  "id": "${space_info}",
  "id": "${space_info}",
  "name": "${space_info}",
  "name": "${space_info}",
  "description": "${space_info}",
  "description": "${space_info}",
  "initials": "",
  "initials": "",
  "disabledFeatures": [
  "disabledFeatures": [
    "siem",
    "siem",
    "logs",
    "logs",
    "infrastructure",
    "infrastructure",
    "apm",
    "apm",
    "uptime",
    "uptime",
    "enterpriseSearch",
    "enterpriseSearch",
    "advancedSettings",
    "advancedSettings",
    "savedObjectsManagement",
    "savedObjectsManagement",
    "savedObjectsTagging",
    "savedObjectsTagging",
    "fleet",
    "fleet",
    "actions",
    "actions",
    "stackAlerts",
    "stackAlerts",
    "monitoring"
    "monitoring"
  ]
  ]
}
}
EOF
EOF
</nowiki></pre>
[[分类:Kibana]]
[[分类:Kibana]]
[[分类:Efk]]
[[分类:Efk]]

2022年9月1日 (四) 15:07的版本

space / 工作区

official doc: https://www.elastic.co/guide/en/kibana/current/spaces-api.html

通过kibana space可以完成如隐藏index_pattern (索引模式),针对space隐藏特定字段(但是还是能搜索),隐藏菜单 等定制化操作

在通过界面创建space检查无误后,可以通过kibana api批量创建space

Get all Kibana spaces API / 查询所有space

curl "http://kibana_url/api/spaces/space" -u root:root
curl "http://kibana_url/api/spaces/space" -u root:root -s | jq .

Create space API / 创建space

curl "http://kibana_url/api/spaces/space" -u root:root -H "kbn-version: 7.12.1" -XPOST -H "Content-Type: application/json" -d '{"id":"space-id","name":"space-name","description":"","initials":"","disabledFeatures":["siem","logs","infrastructure","apm","uptime","enterpriseSearch","advancedSettings","savedObjectsManagement","savedObjectsTagging","fleet","actions","stackAlerts","monitoring"]}'
space_info=space_name curl "http://kibana_url/api/spaces/space" -u root:root -H "kbn-version: 7.12.1" -XPOST -H "Content-Type: application/json" \ 
 --data-binary @- << EOF
{
  "id": "${space_info}",
  "name": "${space_info}",
  "description": "${space_info}",
  "initials": "",
  "disabledFeatures": [
    "siem",
    "logs",
    "infrastructure",
    "apm",
    "uptime",
    "enterpriseSearch",
    "advancedSettings",
    "savedObjectsManagement",
    "savedObjectsTagging",
    "fleet",
    "actions",
    "stackAlerts",
    "monitoring"
  ]
}
EOF