diff --git a/docs/gettingstarted.asciidoc b/docs/gettingstarted.asciidoc
index 7409019635d..170c4fadc8b 100644
--- a/docs/gettingstarted.asciidoc
+++ b/docs/gettingstarted.asciidoc
@@ -307,12 +307,12 @@ Now point your browser to port 5601 and you should see the Kibana web
 interface.
 
 The first thing you need to do is to configure the index pattern. In
-the *Index name or pattern* field enter `packetbeat-*` and for the *Time-field
+the *Index name or pattern* field enter `[packetbeat-]YYYY.MM.DD` and for the *Time-field
 name* select `timestamp`.
 
 image:./images/kibana-index-pattern.png[Kibana index pattern]
 
-If after you configure the `packetbeat-*` index pattern Kibana still says
+If after you configure the `[packetbeat-]YYYY.MM.DD` index pattern Kibana still says
 _Unable to fetch mapping. Do you have indices matching the pattern?_, it means
 that Packetbeat hasn't yet written any data into Elasticsearch. Make sure that
 some traffic was running on your servers and that Packetbeat could see it.