Logs settings in Kibana

You do not need to configure any settings to use the Logs app in Kibana. It is enabled by default.

The Kibana logs can be found per operating system under:

Linux, DEB or RPM package: /var/log/kibana/kibana.log
Linux, tar.gz package: $KIBANA_HOME/log/kibana.log
Windows: $KIBANA_HOME\log\kibana.log

General Logs settings

xpack.infra.sources.default.fields.message The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability Deprecated since 8.18 This functionality is deprecated. You can still use it, but it'll be removed in a future Elastic Stack update. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.

Supported on: Self-managed deployments are Elastic Stack deployments managed without the assistance of an orchestrator. Availability Generally available This functionality is generally available and ready for production usage. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.

Fields used to display messages in the Logs app.

Datatype: string

Default: `['message', '@message']`

Deprecation details

Deprecated in 8.18.

xpack.infra.alerting.inventory_threshold.group_by_page_size

Controls the size of the composite aggregations used by the Inventory Threshold to retrieve all the hosts.

Datatype: int

Default: 5000

xpack.infra.alerting.metric_threshold.group_by_page_size

Controls the size of the composite aggregations used by the Metric Threshold group by feature.

Datatype: int

Default: 10000