Skip to main content
Glama

Create Data View

create_data_view

Create a Kibana data view to visualize data from an index pattern. Optionally set a display name and time field (must be a date field); the name must be unused.

Instructions

Create a Kibana data view over an index pattern (e.g. 'logs-*'). Optionally set a display name and a time field (for time-series data). The time field must be a date field of the indices the pattern matches: a field they do not have, or one that is not a date, is refused with the pattern's date fields listed, and no data view is created. A pattern that matches no index yet is accepted, but its time field cannot be checked. The name (it defaults to the index pattern) must be unused; to change an existing view, call update_data_view.

space targets a Kibana space by id (default: the default space).

Input Schema

NameRequiredDescriptionDefault
nameNo
spaceNo
time_fieldNo
index_patternYes

Output Schema

NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.0

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations cover the safety profile (readOnlyHint=false, destructiveHint=false, openWorldHint=false, idempotentHint=false), and the description goes well beyond them: it discloses the time_field validation failure mode (refused with the pattern's date fields listed, no data view created), the edge case of a pattern matching no index (accepted but time field unchecked), and the unused-name constraint. This is exactly the failure/auth-adjacent context annotations cannot carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core action is front-loaded in the first sentence, and the following sentences each add a distinct constraint rather than padding. It is dense but every clause (validation, name uniqueness, space) earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described, and the description covers all four parameters, the create/update boundary, validation failure behavior, and space scoping. Nothing needed to invoke it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description carries the full burden and does: name (defaults to the index pattern, must be unused), time_field (must be a date field of the matched indices), space (targets a Kibana space by id, default is the default space), and index_pattern (example given). All four parameters gain meaning beyond the bare types.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Create a Kibana data view over an index pattern') and gives a concrete example ('logs-*'). It also distinguishes itself from the sibling update_data_view, which handles modifying existing views.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly routes modification of an existing view to update_data_view, which is the key alternative an agent might confuse this with. It does not spell out general when-not-to-create conditions, but the create-vs-update boundary is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.