Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 0 additions & 2 deletions explore-analyze/dashboards.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,8 +14,6 @@ A **dashboard** is made of one or more **panels** that you can organize as you l

![Example dashboard](/explore-analyze/images/kibana-dashboard-overview.png "")

There are several [panel editors](visualize.md#panels-editors) in {{kib}} that let you create and configure different types of visualizations.

At any time, you can [share a dashboard](dashboards/sharing.md) you’ve created with your team, in {{kib}} or outside.

Some dashboards are created and managed by the system, and are identified as `managed` in your list of dashboards. This generally happens when you set up an integration to add data. You can’t edit managed dashboards directly, but you can [duplicate](dashboards/duplicate-dashboards.md) them and edit these duplicates.
Original file line number Diff line number Diff line change
Expand Up @@ -143,7 +143,7 @@ To save space on the dashboard, hide the axis labels.

Since you removed the axis labels, add a panel title:

1. Hover over the panel and click ![Settings icon](/explore-analyze/images/kibana-settings-icon-hover-action.png ""). The **Settings** flyout appears.
1. Hover over the panel and click ![Settings icon](/explore-analyze/images/kibana-settings-icon-hover-action.png "kibana-settings-icon-hover-action =4%x4%"). The **Settings** flyout appears.
2. In the **Title** field, enter `Median of bytes`, then click **Apply**.

:::{image} /explore-analyze/images/kibana-lens_lineChartMetricOverTime_8.4.0.png
Expand Down Expand Up @@ -250,7 +250,7 @@ To display the values as a percentage of the sum of all values, use the **Pie**

Add a panel title:

1. Hover over the panel and click ![Settings icon](/explore-analyze/images/kibana-settings-icon-hover-action.png ""). The **Settings** flyout appears.
1. Hover over the panel and click ![Settings icon](/explore-analyze/images/kibana-settings-icon-hover-action.png "kibana-settings-icon-hover-action =4%x4%"). The **Settings** flyout appears.
2. In the **Title** field, enter `Sum of bytes from large requests`, then click **Apply**.


Expand Down Expand Up @@ -279,7 +279,7 @@ The distribution of a number can help you find patterns. For example, you can an

Add a panel title:

1. Hover over the panel and click ![Settings icon](/explore-analyze/images/kibana-settings-icon-hover-action.png ""). The **Settings** flyout appears.
1. Hover over the panel and click ![Settings icon](/explore-analyze/images/kibana-settings-icon-hover-action.png "kibana-settings-icon-hover-action =4%x4%"). The **Settings** flyout appears.
2. In the **Title** field, enter `Website traffic`, then click **Apply**.


Expand Down Expand Up @@ -339,7 +339,7 @@ Remove the documents that do not match the filter criteria:

Add a panel title:

1. Hover over the panel and click ![Settings icon](/explore-analyze/images/kibana-settings-icon-hover-action.png ""). The **Settings** flyout appears.
1. Hover over the panel and click ![Settings icon](/explore-analyze/images/kibana-settings-icon-hover-action.png "kibana-settings-icon-hover-action =4%x4%"). The **Settings** flyout appears.
2. In the **Title** field, enter `Page views by location and referrer`, then click **Apply**.


Expand Down
1 change: 1 addition & 0 deletions explore-analyze/dashboards/create-dashboard.md
Original file line number Diff line number Diff line change
Expand Up @@ -36,6 +36,7 @@ mapped_pages:
* **Sync tooltips across panels** — When you hover your cursor over a **Lens** chart, the tooltips on all other related dashboard charts automatically appear.

3. Click **Apply**.

![Change and apply dashboard settings](https://images.contentstack.io/v3/assets/bltefdd0b53724fa2ce/blt4a6e9807f1fac9f8/6750ee9cef6d5a250c229e50/dashboard-settings-8.17.0.gif "title =50%")

6. Click **Save** to save the dashboard.
2 changes: 1 addition & 1 deletion explore-analyze/dashboards/duplicate-dashboards.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ mapped_pages:
- https://www.elastic.co/guide/en/kibana/current/duplicate-dashboards.html
---

# Duplicate dashboards [duplicate-dashboards]
# Duplicate a dashboard [duplicate-dashboards]

1. Open the dashboard you want to duplicate.
2. In **View** mode, click **Duplicate** in the toolbar.
Expand Down
4 changes: 2 additions & 2 deletions explore-analyze/dashboards/import-dashboards.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,9 +6,9 @@ mapped_pages:
- https://www.elastic.co/guide/en/kibana/current/_import_dashboards.html
---

# Import dashboards [_import_dashboards]
# Import a dashboard [_import_dashboards]

You can import dashboards from the **Saved Objects** page under **Stack Management**. Refer to [Manage saved objects](../find-and-organize/saved-objects.md).
You can import dashboards from the [Saved Objects](../find-and-organize/saved-objects.md) page under **Stack Management**.

When importing dashboards, you also import their related objects, such as data views and visualizations. Import options allow you to define how the import should behave with these related objects.

Expand Down
2 changes: 1 addition & 1 deletion explore-analyze/dashboards/sharing.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ mapped_pages:

# Sharing dashboards [share-the-dashboard]

To share a dashboard with a larger audience, click **Share** in the toolbar. For detailed information about the sharing options, refer to [Reporting](../report-and-share.md).
To share a dashboard with a larger audience, click **Share** in the toolbar. For detailed information about the sharing options, refer to [Reporting and sharing](../report-and-share.md).

:::{image} /explore-analyze/images/share-dashboard-copy-link.gif
:alt: getting a shareable link for a dashboard
Expand Down
5 changes: 4 additions & 1 deletion explore-analyze/dashboards/using.md
Original file line number Diff line number Diff line change
Expand Up @@ -29,6 +29,7 @@ Use filter pills to focus in on the specific data you want.
:::{image} /explore-analyze/images/kibana-dashboard_filter_pills_8.15.0.png
:alt: Filter pills
:screenshot:
:width: 500px
:::


Expand Down Expand Up @@ -56,6 +57,7 @@ The query bar lets you build filters using [{{kib}} Query Language (KQL)](../que

:::{image} /explore-analyze/images/kibana-dashboard-filter-kql.png
:alt: KQL filter dynamically suggesting values
:width: 400px
:::


Expand All @@ -70,14 +72,15 @@ The global time range menu is located right next to the query bar, in the dashbo

:::{image} /explore-analyze/images/kibana-dashboard-global-time-range.png
:alt: Time range menu with multiple time range suggestions
:width: 500px
:::


#### Apply a custom time range to a panel [_apply_a_custom_time_range_to_a_panel]

**To apply a panel-level time range:**

1. Hover over the panel and click ![Settings icon](/explore-analyze/images/kibana-settings-icon-hover-action.png ""). The **Settings** flyout appears.
1. Hover over the panel and click ![Settings icon](/explore-analyze/images/kibana-settings-icon-hover-action.png "kibana-settings-icon-hover-action =4%x4%"). The **Settings** flyout appears.
2. Turn on **Apply a custom time range**.
3. Enter the time range you want to view, then click **Apply**.

Expand Down
11 changes: 7 additions & 4 deletions explore-analyze/discover/discover-get-started.md
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ Select the data you want to explore, and then specify the time range in which to
::::{tip}
By default, {{kib}} requires a [{{data-source}}](../find-and-organize/data-views.md) to access your Elasticsearch data. A {{data-source}} can point to one or more indices, [data streams](../../manage-data/data-store/data-streams.md), or [index aliases](https://www.elastic.co/guide/en/elasticsearch/reference/current/alias.html). When adding data to {{es}} using one of the many integrations available, sometimes data views are created automatically, but you can also create your own.

You can also [try {{esql}}](try-esql.md), that let's you query any data you have in {{es}} without specifying a {{data-source}} first.
You can also [try {{esql}}](try-esql.md), that lets you query any data you have in {{es}} without specifying a {{data-source}} first.
::::
If you’re using sample data, data views are automatically created and are ready to use.
:::{image} /explore-analyze/images/kibana-discover-data-view.png
Expand Down Expand Up @@ -67,17 +67,19 @@ You can later filter the data that shows in the chart and in the table by specif
**Discover** shows the top 10 values and the number of records used to calculate those values.

3. Select the **Plus** icon to add fields to the results table. You can also drag them from the list into the table.

![How to add a field as a column in the table](/explore-analyze/images/kibana-discover-add-field.png "title =50%")

When you add fields to the table, the **Summary** column is replaced.
![Document table with fields for manufacturer](/explore-analyze/images/kibana-document-table.png "")

4. Arrange the view to your liking to display the fields and data you care most about using the various display options of **Discover**. For example, you can change the order and size of columns, expand the table to be in full screen or collapse the chart and the list of fields. Check [Customize the Discover view](document-explorer.md).
4. Arrange the view to your liking to display the fields and data you care most about using the various display options of **Discover**. For example, you can change the order and size of columns, expand the table to be in full screen or collapse the chart and the list of fields. Check [Customize the Discover view](document-explorer.md) for more information.
5. **Save** your changes to be able to open the same view later on and explore your data further.


### Add a field to your {{data-source}} [add-field-in-discover]

What happens if you forgot to define an important value as a separate field? Or, what if you want to combine two fields and treat them as one? This is where [runtime fields](../../manage-data/data-store/mapping/runtime-fields.md) come into play. You can add a runtime field to your {{data-source}} from inside of **Discover**, and then use that field for analysis and visualizations, the same way you do with other fields.
What happens if you forgot to define an important value as a separate field? Or, what if you want to combine two fields and treat them as one? This is where [runtime fields](../../manage-data/data-store/mapping/runtime-fields.md) come into play. You can add a runtime field to your {{data-source}} from inside of **Discover**, and then use that field for analysis and visualizations the same way you do with other fields.

1. In the sidebar, select **Add a field**.
2. Select the **Type** of the new field.
Expand Down Expand Up @@ -125,6 +127,7 @@ In the following example, we’re adding 2 fields: A simple "Hello world" field,
If a field can be [aggregated](../query-filter/aggregations.md), you can quickly visualize it in detail by opening it in **Lens** from **Discover**. **Lens** is the default visualization editor in {{kib}}.

1. In the list of fields, find an aggregatable field. For example, with the sample data, you can look for `day_of_week`.

![Top values for the day_of_week field](/explore-analyze/images/kibana-discover-day-of-week.png "title =60%")

2. In the popup, click **Visualize**.
Expand All @@ -135,7 +138,7 @@ If a field can be [aggregated](../query-filter/aggregations.md), you can quickly

4. Save the visualization if you’d like to add it to a dashboard or keep it in the Visualize library for later use.

For geo point fields (![Geo point field icon](/explore-analyze/images/kibana-geoip-icon.png "")), if you click **Visualize**, your data appears in a map.
For geo point fields (![Geo point field icon](/explore-analyze/images/kibana-geoip-icon.png "kibana-geoip-icon =4%x4%")), if you click **Visualize**, your data appears in a map.

![Map containing documents](/explore-analyze/images/kibana-discover-maps.png "")

Expand Down
2 changes: 2 additions & 0 deletions explore-analyze/discover/discover-search-for-relevance.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,9 @@ This example shows how to use **Discover** to list your documents from most rele
6. To turn off sorting by the `timestamp` field, click the **field sorted** option, and then click **Clear sorting.**
7. Open the **Pick fields to sort by** menu, and then click **_score**.
8. Select **High-Low**.

![Field sorting popover](/explore-analyze/images/kibana-field-sorting-popover.png "title =50%")

Your table now sorts documents from most to least relevant.
:::{image} /explore-analyze/images/kibana-discover-search-for-relevance.png
:alt: Documents are sorted from most relevant to least relevant.
Expand Down
4 changes: 2 additions & 2 deletions explore-analyze/discover/document-explorer.md
Original file line number Diff line number Diff line change
Expand Up @@ -55,10 +55,9 @@ You can define different settings for the header row and body rows.

When the number of results returned by your search query (displayed at the top of the **Documents** or **Results** tab) is greater than the value of [`discover:sampleSize`](kibana://reference/advanced-settings.md#kibana-discover-settings), the number of results displayed in the table is limited to the configured value by default. You can adjust the initial sample size for searches to any number between 10 and `discover:sampleSize` from the **Display options** located in the table toolbar.

On the last page of the table, a message indicates that you’ve reached the end of the loaded search results. From that message, you can choose to load more results to continue exploring.

![Limit sample size in Discover](/explore-analyze/images/kibana-discover-limit-sample-size.png "title =50%")

On the last page of the table, a message indicates that you’ve reached the end of the loaded search results. From that message, you can choose to load more results to continue exploring.

### Sort the fields [document-explorer-sort-data]

Expand All @@ -69,6 +68,7 @@ To add or remove a sort on a single field, click the column header, and then sel
To sort by multiple fields:

1. Click the **Sort fields** option.

![Pop-up in document table for sorting columns](/explore-analyze/images/kibana-document-explorer-sort-data.png "title =50%")

2. To add fields to the sort, select their names from the dropdown menu.
Expand Down
2 changes: 2 additions & 0 deletions explore-analyze/discover/search-sessions.md
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,9 @@ You’re trying to understand a trend you see on a dashboard. You need to look a
Your search session begins automatically. The icon after the dashboard title displays the current state of the search session. A clock icon indicates the search session is in progress. A checkmark indicates that the search session is complete.

2. To continue a search in the background, click the clock icon, and then click **Save session**.

![Search Session indicator displaying the current state of the search](/explore-analyze/images/kibana-search-session-awhile.png "title =50%")

Once you save a search session, you can start a new search, navigate to a different application, or close the browser.

3. To view your saved search sessions, go to the **Search Sessions** management page using the navigation menu or the [global search field](../../explore-analyze/find-and-organize/find-apps-and-objects.md). For a saved or completed session, you can also open this view from the search sessions popup.
Expand Down
2 changes: 1 addition & 1 deletion explore-analyze/discover/try-esql.md
Original file line number Diff line number Diff line change
Expand Up @@ -59,7 +59,7 @@ To load the sample data:
::::


Let’s add `geo.dest` to our query, to find out the geographical destination of the visits, and limit the results.
Let’s add `geo.dest` to our query to find out the geographical destination of the visits and limit the results.

1. Copy the query below:

Expand Down
2 changes: 1 addition & 1 deletion explore-analyze/find-and-organize/files.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ mapped_pages:

# Files [files]

Several features let you upload files. For example, you can add files to [cases](../../solutions/observability/incident-management/cases.md) or upload a logo to an **Image** panel in a [Dashboard](../dashboards.md).
Several features let you upload files. For example, you can add files to [cases](../../solutions/observability/incident-management/cases.md) or upload a logo to an [Image panel](../visualize/image-panels.md) in a dashboard.

You can access and manage all of the files currently stored in {{kib}} from the **Files** page.

Expand Down
2 changes: 1 addition & 1 deletion explore-analyze/find-and-organize/reports.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ mapped_pages:

{{kib}} provides you with several options to share saved searches, dashboards, and visualizations.

For example, in **Discover**, you can create and download comma-separated values (CSV) files for saved searches.
For example, in **Discover**, you can create and download comma-separated values (CSV) reports for saved searches.

To view and manage reports, go to **Management** > **Reporting**.

Expand Down
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
20 changes: 18 additions & 2 deletions explore-analyze/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -95,7 +95,8 @@ Elasticsearch integrates machine learning for proactive analytics, helping you t
* Forecast future trends
* Analyze seasonal patterns
* Perform powerful NLP operations such as semantic search
* Machine learning models simplify complex predictive tasks, unlocking new opportunities for optimization.

Machine learning models simplify complex predictive tasks, unlocking new opportunities for optimization.

## Scripting

Expand All @@ -111,23 +112,38 @@ Scripting makes custom data manipulation and transformation possible during sear

It’s the starting point for exploratory analysis.

:::{image} /explore-analyze/images/explore-analyze-discover.png
:alt: Documents tab in Discover
:screenshot:
:::

## Visualize the data [view-and-analyze-the-data]

Create a variety of visualizations and add them to a dashboard.

### Dashboards
[Dashboards](/explore-analyze/dashboards.md) serve as centralized hubs for visualizing and monitoring data insights. With Dashboards, you can:
[Dashboards](/explore-analyze/dashboards.md) serve as centralized hubs for visualizing and monitoring data insights. With dashboards, you can:

* Combine multiple visualizations into a single, unified view
* Display data from multiple indices or datasets for comprehensive analysis
* Customize layouts to suit specific workflows and preferences

Dashboards provide an interactive and cohesive environment with filtering capabilities and controls to explore trends and metrics at a glance.

:::{image} /explore-analyze/images/explore-analyze-dashboard.png
:alt: Bar chart in Lens showing flight delay type
:screenshot:
:::

### Panels and visualizations

[Panels and visualizations](/explore-analyze/visualize.md) are the core elements that populate your dashboards, enabling dynamic data representation. They support diverse chart types, Interactive filtering, and drill-down capabilities to explore data further. These building blocks transform raw data into clear, actionable visuals, allowing users to analyze and interpret results effectively.

:::{image} /explore-analyze/images/explore-analyze-lens.png
:alt: Sample Flight data dashboard
:screenshot:
:::

## Reporting and sharing

You can share your work and findings with colleagues and stakeholders or generate reports. Report generation can be scheduled or on-demand. You can choose from multiple formats (for example, PDF, CSV). These tools ensure that actionable insights reach the right people at the right time.
Expand Down
2 changes: 1 addition & 1 deletion explore-analyze/query-filter/filtering.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ Some apps provide more options, such as [Dashboards](../dashboards.md).

Display data within a specified time range when your index contains time-based events, and a time-field is configured for the selected [{{data-source}}](../find-and-organize/data-views.md). The default time range is 15 minutes, but you can customize it in [Advanced Settings](kibana://reference/advanced-settings.md).

1. Click ![calendar icon](/explore-analyze/images/kibana-time-filter-icon.png).
1. Click ![calendar icon](/explore-analyze/images/kibana-time-filter-icon.png "calendar icon =7%x7%").
2. Choose one of the following:

* **Quick select**. Set a time based on the last or next number of seconds, minutes, hours, or other time unit.
Expand Down
Loading
Loading