From 59d2a6e8c5f0ffc434165f3c922d7477685f469e Mon Sep 17 00:00:00 2001 From: Pius Date: Thu, 8 Mar 2018 12:34:41 -0800 Subject: [PATCH] Fixed ccs syntax cluster_one,cluster_two:logstash-* should be cluster_one:logstash-*,cluster_two:logstash-* --- .../index-patterns/management-cross-cluster-search.asciidoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/management/index-patterns/management-cross-cluster-search.asciidoc b/docs/management/index-patterns/management-cross-cluster-search.asciidoc index e1b0dbbfe6c1f..e613806eb4450 100644 --- a/docs/management/index-patterns/management-cross-cluster-search.asciidoc +++ b/docs/management/index-patterns/management-cross-cluster-search.asciidoc @@ -16,7 +16,7 @@ index pattern in Kibana with the convention `:`. For example, if you want to query logstash indices across two of the Elasticsearch clusters that you set up for cross cluster search, which were named `cluster_one` and `cluster_two`, -you would use `cluster_one,cluster_two:logstash-*` as your index pattern in Kibana. +you would use `cluster_one:logstash-*,cluster_two:logstash-*` as your index pattern in Kibana. Just like in raw search requests in Elasticsearch, you can use wildcards in your cluster names to match any number of clusters, so if you wanted to search logstash indices across any