Hey. You there. Want a sneak peek at a product in progress?
 There's a technology preview of Canvas for Kibana available for the adventurous

<p>Hey. You there. Want a sneak peek at a product in progress?
</p><p>We showed off an early prototype of Canvas at Elastic{ON} 17 earlier this year and since then we’ve been hacking on translating the concepts from that prototype into something we can share with you. Let’s be clear: This is still early stuff. But we’re having enough fun with it in the lab that we want to share fun with you. Well, probably you anyway.</p><h3>Is this preview for me?
</h3><p>Have you ever taken something apart with no intention of putting it back together, just to see how it works? Can you make a half passable drink in the absence of a half passable liquor cabinet? Would you ride your bike down a road just because you’ve never ridden a bike down that road before? Do you do&nbsp;things just to prove to yourself that you can?
</p><p>If you answered yes, or no, to any or all, of these questions, then Canvas might be for you. These rough cuts of Canvas are for those with a bit of curiosity, some imagination and a whole lot of crazy.
</p><p>One more question: Do you run everything and anything in production? If so, Canvas isn’t for you. Canvas is marching forward rapidly, so we recommend that you try it out in an environment that won’t anger the masses should a hiccup occur.
</p><h3>Ok, what is it?
</h3><p><i>What isn’t it?!</i> Hold on, we’re getting ahead of ourselves. There’s a section on that later. In short, Canvas is a composable, extendable, creative space for live data.&nbsp;
</p><p><span id="docs-internal-guid-e3b2be76-28be-0d5e-2041-fcd0c0336b9f"><img src="https://lh4.googleusercontent.com/3swoPTfi2KirZQq2MJiCQqc6YgQhIQf3Pu5JL_gLbCak04qLitvdRifKKvjRKOvOsTxDbBlM5btC4QKrUasyW9SrrKGniF0wL7orBDzakZalM-ZPPwHEovh_NCXoY1omYhU4SEum" width="624" height="315"></span>
</p><p>The &nbsp;goal of Canvas is to be flexible, and allow you to tweak all bits and pieces required&nbsp;to get to the result you desire. Canvas presents you with a blank page to which you can add a selection of elements. These elements can be connected to data and configured with a simple UI. Within the sidebar you can play with palettes, fonts, background, borders and more. When there’s a style you have to have, but there isn’t a button, Canvas gives you the option of using raw CSS.
</p><p>Canvas today can’t do everything (though we’re working on that!) but its capabilities go much deeper than what you see on the surface. Sometimes&nbsp;you need to manipulate the style, or even the data, in a way that no graphical interface can easily express.
</p><p>The Canvas interface is intentionally compact because many of the most interesting and powerful features of Canvas are contained within a small window at the bottom of the screen. Hidden behind a button that says <i>Code</i> is the nerve center of Canvas.&nbsp;
</p><p>The interfaces you touch in Canvas, are in fact manipulating the Canvas expression in this text box. The expression describes everything Canvas needs to do to create your element. When you change something in the sidebar, for example a color palette, Canvas updates that expression in the right place.&nbsp;
</p><p><span id="docs-internal-guid-e3b2be76-28be-b0d4-8190-075707315803"><img src="https://lh6.googleusercontent.com/7HwbMFneWsPkb6-eis0QVXp1dJELR-ntRR2RzUEoIbCa8nDuTPzMNgEegQA_DjdLtdqyUiMsUYxKLyRRO5b4caFCYjgkiw5TyWAQJvDxKsNh5hJVUQKFdaAMDoYH0utvCVZ73FnW" width="624" height="380"></span><br>
</p><p>Not only can Canvas update the expression, but you can too and Canvas will do its best to create an interface to whatever you type. For example if you add or&nbsp;change the palette in the expression, the sidebar will update to reflect the expression&nbsp;in turn. There isn’t an interface to every function and argument, but we’re steadily adding new ones.
</p><p>Canvas expressions are simple, but like any sufficiently powerful concept, there is a learning curve. At its heart it is a pipe based syntax, and the output of one function flows&nbsp;into the next:
</p><p><code>esdocs q='error' fields='@timestamp, bytes' count=100 sort='@timestamp,desc' | pointseries x=@timestamp y='sum(bytes)' | plot</code>
</p><p>Here we’re using the <code>esdocs</code> function to search for the string “error” and retrieve the "@timestamp" and "bytes" fields for the most recent 100 document. Then we’re using the <code>pointseries</code> function to assign those fields to dimensions, and finally piping into <code>plot</code> to put the points on a simple chart.
</p><p><span id="docs-internal-guid-e3b2be76-28be-ffef-e5ff-2c0016ce861f"><img src="https://lh4.googleusercontent.com/2F80GSJ7UdFgV36W3EvsVo7tPi59C--pnkN9Dz_tqLE9wznBnsQt87-GjllSfJBIFu3tVzpZNOrDFszB6BfIU6xFtJVV5RqLx-e4P8UxpoVETJZAvGFYNUpzyiUEXdqzOxZO9SNL" width="624" height="493"></span>
</p><p>This is, of course, a very simple example, all of these functions have arguments we aren't using. Canvas has dozens of functions and many more capabilities including table transforms, type casting and sub-expressions. The best way to learn right now is to open the code screen and play with the sidebar to see how it manipulates the expression. If you really want to dig deep see the <a href="http://canvas.elastic.co/reference/functions.html">Canvas Function Reference</a>.
</p><h3>What doesn’t it do? (aka: What’s coming?)
</h3><p>See, I told you there was a section for this. Let’s get this out of the way. Elasticsearch aggregations: It doesn’t do those yet. While we could build a function to perform aggregations it wouldn’t change anything else about how Canvas works, so we figured we’d rather share Canvas with you sooner. Plus, we’re working to ensure that Canvas supports <a href="https://www.elastic.co/elasticon/conf/2017/sf/elasticsearch-sql">Elasticsearch SQL</a> as soon as it’s ready.
</p><p><span id="docs-internal-guid-e3b2be76-28bf-6d5e-3d12-042e79f17f7a"><img src="https://lh5.googleusercontent.com/6VkuG0D_9zvZF3ktw3EEdffncdWB0O0c6xNABQm15r_ejJHfG9yTO_dE1bt8wVEVWuyclAQ84UE2r2Z7QhIxi5EiSfYsZaWARb9zfB6ipXwltj9X23vYxKGJuxrep0NDeQPVxG0P" width="624" height="333"></span><br>
</p><p>What it does support is working with, and charting, raw Elasticsearch documents, which is something we haven’t historically done in Kibana. That means you can do scatter style plots of low density data sets.&nbsp;
</p><p>We’re also working to integrate Canvas with X-Pack Reporting so you can email PDFs and print out hard copies of Canvas work pads. We have a proof of concept, we just need to get everything tied in, look for it soon!
</p><p>There’s a million other little features we’re working on, and a few big ones we’re still exploring, so you can expect to see many changes to Canvas in the near future. What a time to be alive.&nbsp;
</p><h3>How do I learn more?
</h3><p>We’ve put together a series of short videos and articles highlighting how Canvas works. Like Canvas itself these are in an ever changing state of forward progress so we’ve broken them off into a micro-site just for Canvas over at <a href="http://canvas.elastic.co/">canvas.elastic.co</a>.&nbsp;
</p><h3>How do I install it?&nbsp;
</h3><p>Pop over to <a href="http://canvas.elastic.co/stories/installing.html">the installation page on the micro site</a>&nbsp;for installation instructions. Canvas installs like any other Kibana plugin, but there’s a couple things you should know. Plus that site always has install instruction for the latest and greatest Canvas build.
</p><h3>How do I give you feedback?
</h3><p>In the lower right hand corner of the application you’ll find a “Give Feedback” button. We’d love to hear about how you’re using Canvas, what you’re making and what you’d like to be able to do. If you don’t need a response and just want to let us know about something, submit feedback there. Otherwise, if you have a question, join us in the&nbsp;<a href="https://discuss.elastic.co/c/kibana">Kibana sub-forum</a>&nbsp;of&nbsp;<a href="http://discuss.elastic.co">discuss.elastic.co</a>
</p>

30889525-c2d73c6c-a2db-11e7-8906-b31011736813.png

Canvas Technology Preview

Need to make a per-second (or per anything!) rate out of sparse time series data? There's a large African cat themed answer to that. Timelion can fill the gaps!

nope.png

Screen Shot 2017-04-26 at 1.03.52 PM.png

Normalizing sparse time series with Timelion

Kibana needs to be secured to avoid falling victim to ransom attacks.  This post tells you how to do that.

<table style="background: #FFFFD2;">
<tbody>
<tr>
<td><strong>Important note for users of Elastic Stack 6.8/7.1 or later:</strong> The default distribution of the Elastic Stack now includes security features that you can enable permanently for free. This includes TLS encryption, user authentication, and role-based access control. Check out <a href="/blog/getting-started-with-elasticsearch-security">Getting Started with Elasticsearch Security</a> for implementation details.</td>
</tr>
</tbody>
</table><p>As you may have read, open source applications exposed to the internet have recently been targeted for <a href="http://arstechnica.co.uk/security/2017/01/more-than-10000-online-databases-taken-hostage-by-ransomware-attackers/">data ransom attacks</a> in the same spirit as the <a href="https://en.wikipedia.org/wiki/CryptoLocker">cryptolocker trojan</a> that targeted desktop computers years ago. &nbsp;The recent round of attacks are made all the more insidious by the deleting of the data, leaving data owners with few options.
</p><p>While these attacks are not related to any vulnerability in Kibana, and there are no known ongoing campaigns targeting Kibana installations, there are a few things you can do to mitigate future risk.
</p><p>Your first line of defense is to not expose Kibana directly to the internet. Kibana 5.x comes pre-configured to <a href="https://www.elastic.co/guide/en/kibana/current/settings.html">bind to localhost</a> by default, as does Elasticsearch. &nbsp;Note that Kibana 4.x binds to 0.0.0.0 by default, which will make it available on all IPv4 interfaces. &nbsp;If you must expose Kibana on the internet there are a few step you should take today to protect yourself.
</p><p>Kibana is designed to prevent deletion or modification of your logging and application data, however the .kibana index must remain writable in order to build visualizations and dashboards, and store other configuration parameters. For this reason we suggest you immediately perform a backup of the .kibana index using the <a href="https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-snapshots.html">Elasticsearch Snapshot and Restore</a> API. The <a href="https://www.elastic.co/cloud/as-a-service/signup">Elastic Cloud</a> service, which provides <a href="https://www.elastic.co/cloud/as-a-service">Kibana as a service</a>, stores 2 days of cluster data by default.
</p><p>The next step is to restrict access to known users. Elastic Cloud users are protected by default with the <a href="https://www.elastic.co/products/x-pack">Elastic X-Pack</a>, which comes complete with authorization, authentication and strong HTTPS encrypted communication to the internet.
</p><p>For on-site deployments of Kibana we strongly recommend the <a href="https://www.elastic.co/guide/en/x-pack/current/xpack-security.html">installation and configuration of X-Pack</a> locally. &nbsp;This should include creating a user with a strong password, creating roles if needed, and enabling HTTPS to protect the communication between the browser and Kibana server.
</p><p>For those unable to install X-Pack, a reverse proxy may also be deployed. The Basic Authentication section from our blog article on <a href="https://www.elastic.co/blog/playing-http-tricks-nginx">Reverse Proxies and Elasticsearch</a> can be applied to Kibana by substituting port 5601 for the port 9200 in the article. We strongly recommend you also configure HTTPS.
</p><p>Finally, <a href="https://www.elastic.co/guide/en/elastic-stack/current/upgrading-elastic-stack.html">staying up to date</a> with <a href="https://www.elastic.co/products">the latest version of the Elastic stack</a>, and this blog, will ensure you always have the most secure version of Kibana available. &nbsp; Please ask for help if you need it, either in our <a href="https://discuss.elastic.co/c/kibana">forums</a> or via the <a href="https://support.elastic.co/customers/login">support portal</a>.
</p>

blog-kibana-banner.jpg

blog-kibana-thumbnail.jpg

Guarding Kibana from Data Hijacking

Did you know Timelion has if-then-else style conditional statements? Now you do. Learn to wield your new found knowledge for good, or evil, or whatever.

Screen Shot 2016-11-08 at 10.16.01 AM.png

I have but one .condition(). Timeseries if-then-else with Timelion

Today we are pleased to announce the release of Kibana 4.4.0 with support for Elasticsearch 2.2.

<html><head></head><body><p>Kibana 4.4.0, with support for Elasticsearch 2.2.0 has landed. There are oh so many changes and we totally understand if you can&apos;t contain yourself and are just too impatient and just absolutely need to download it right now.&#xA0;If you&#x2019;re already sick of all these words, grab the <a href="https://www.elastic.co/downloads/kibana">official download</a> right now. But hey, you might want to try some breathing exercises, slow down a bit. Now then, take a deep breath, and walk with me through the magical forest of new features.
</p><h3>So many colors</h3><p>&#xA0;You want to select specific colors for your visualizations?  Done. Click the legend for the value you want to change and BEHOLD the color palette! Not only that, but you can now filter legend values in or out with the click of a button.
</p><p><img src="https://api.contentstack.io/v2/assets/575e4d249985d5897637837b/download?uid=bltc39ed008d78d37ab" data-sys-asset-uid="bltc39ed008d78d37ab" alt="Screen Shot 2016-02-02 at 8.55.24 AM.png">
</p><h3>Shared URL shortening</h3><p>Don&apos;t you love massive URLs? No? Huh, ok, well that explains this new feature. Kibana now has a built in URL shortener. Just click the shorten button and tah-dah, easily shareable tiny URLs
</p><p><img src="https://api.contentstack.io/v2/assets/575e4d2558208ba076e29a07/download?uid=blt781f761244545414?uid=blt781f761244545414" data-sys-asset-uid="blt0267f124e80c90a2" alt="Screen Shot 2016-02-02 at 8.56.24 AM.png">
</p><h3>RPMs, DEBs, oh my!&#xA0;</h3><p>Get ready to simplify those deployment scripts, Kibana 4.4.0 is available as an RPM and Debian (and Ubuntu!)&#xA0;packages. Check out the <a href="https://www.elastic.co/guide/en/kibana/current/setup.html#setup-repositories">setup docs</a>&#xA0;for repo info!
</p><h3>Shield your eyes!</h3><p>But that&#x2019;s not all! If you act now (or any time from this point onward), you can also start using the brand new <a href="https://www.elastic.co/guide/en/shield/current/kibana.html">Shield UI plugin for Kibana</a>, which is an infinitely better way to handle user logins.
</p><p><img src="https://api.contentstack.io/v2/assets/575e4d2558208ba076e29a08/download?uid=blt8bc0a5be1a8c97cd?uid=blt8bc0a5be1a8c97cd" data-sys-asset-uid="blt2a7363203200a3e7" alt="kibana-login_1024.png">
</p><h3>All that and more!</h3><ul>
	<li><a href="http:/github.com/elastic/kibana/issues/5733">#5733</a> Time-based index pattern expansion can be set at index pattern creation time.</li>
	<li><a href="http:/github.com/elastic/kibana/issues/5775">#5775</a> Adds a configuration option to change the maximum payload size sent to the server.</li>
	<li><a href="http:/github.com/elastic/kibana/issues/4966">#4966</a>&#xA0;Retina compatible logo</li>
	<li><a href="http:/github.com/elastic/kibana/issues/3625">#3625</a> Downloaded visualizations now use the visualization name as the filename.</li>
	<li><a href="http:/github.com/elastic/kibana/issues/5279">#5279</a> Large strings are truncated with an ellipsis (<code>...</code>).</li>
	<li><a href="http:/github.com/elastic/kibana/issues/5241">#5241</a> Truncated visualization names are displayed in full as tooltips.</li>
</ul><h4>Bug fixes</h4><ul>
	<li><a href="http:/github.com/elastic/kibana/issues/5897">#5897</a> Embedding links no longer include navigation and search bars.</li>
	<li><a href="http:/github.com/elastic/kibana/issues/5896">#5896</a> Bookmarked URLs to saved filtered searches from a previous version of Kibana display <br>
	correctly.</li>
	<li><a href="http:/github.com/elastic/kibana/issues/5744">#5744</a> Fixes bug that caused incorrect display of &#x201C;No results found&#x201D; in some cases.</li>
	<li><a href="http:/github.com/elastic/kibana/issues/5824">#5824</a> Corrects a fatal error when Kibana starts with node x86 on Windows x64 systems.</li>
</ul><h4>Plugin stuff</h4><p>Well aren&apos;t you ambitious? We added some new plugin functionality. Feel free to hack around and ping us in #kibana on irc.freenode.net if you have questions.
</p><ul>
	<li><a href="http:/github.com/elastic/kibana/issues/5226">#5226</a> Plugins must now explicitly enable routing.</li>
	<li><a href="http:/github.com/elastic/kibana/pull/5725">#5725</a> Plugins can extend Chrome navigation.</li>
	<li><a href="http:/github.com/elastic/kibana/issues/4720">#4720</a> Adds support for zip compression.</li>
	<li><a href="http:/github.com/elastic/kibana/pull/5755">#5704</a> Removes Github shortcuts from the plugin installer.</li>
	<li><a href="http:/github.com/elastic/kibana/issues/5661">#5661</a> Fixes the plugin optimization path.</li>
	<li><a href="http:/github.com/elastic/kibana/pull/5538">#5538</a> Plugin apps can use empty export types.</li>
</ul><h3>Go get it!</h3><p>That&apos;s it, that&apos;s all. You don&apos;t have to go home, but you can&apos;t stay here. Well, you can, but there&apos;s nothing else to read. And come to think of it, you should probably only go home if its not the middle of the work day for you. We&apos;re totally not taking the blame for you getting in trouble. Ok, so instead of going home, how about you upgrade to Elasticsearch 2.2.0 and <a href="https://www.elastic.co/downloads/kibana">try out Kibana 4.4.0</a>? If you make anything cool, share it with us <a href="https://twitter.com/elastic">on twitter</a>.
</p></body></html>

Screen Shot 2016-02-02 at 8.55.24 AM.png

Kibana 4.4.0 is eye meltingly colorful

<p>Kibana 4.2.1 and 4.1.3 address several stability and security issues in Kibana. We recommend all users upgrade as soon as possible</p>

<html><head></head><body><p>Today we&apos;re releasing stability and security updates to Kibana 4.1 and 4.2.&#xA0;The 4.2.x series requires Elasticsearch 2.0+, while the 4.1.x series supports Elasticsearch 1.4.4&#xA0;-&#xA0;1.7.&#xA0;Grab 4.2.1 or 4.1.3 right here:&#xA0;<a href="https://www.elastic.co/downloads/kibana">Download Kibana</a>
</p><h3>4.2.1 Fixes and enhancements</h3><ul>
	<li>Fixed a possible CSRF issue.&#xA0;<a href="https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8131">CVE-2015-8131</a></li>
	<li>Fixed a bug when splitting charts on time&#xA0;<a href="https://github.com/elastic/kibana/pull/5325">#5325</a></li>
	<li>Allow Kibana to be run when $HOME&#xA0;path isn&#x2019;t writable&#xA0;<a href="https://github.com/elastic/kibana/pull/5372">#5372</a></li>
	<li>Fix an issue in which bad queries could be generated&#xA0;<a href="https://github.com/elastic/kibana/pull/5333">#5333</a></li>
	<li>Re-enable setting of default app routes&#xA0;<a href="https://github.com/elastic/kibana/pull/5303">#5303</a></li>
	<li>Added ability to set CONFIG_PATH environmental variable&#xA0;<a href="https://github.com/elastic/kibana/pull/5254">#5254</a></li>
</ul><h3>4.1.3 Fixes and enhancements</h3><ul>
	<li>Fixed a possible CSRF issue.&#xA0;<a href="https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8131">CVE-2015-8131</a></li>
	<li>Fixed memory leak in browser&#xA0;<a href=" https://github.com/elastic/kibana/pull/5381">#5381</a>&#xA0;/&#xA0;<a href="https://github.com/elastic/kibana/pull/4999">#4999</a></li>
	<li>Fixed a bug when splitting charts on time&#xA0;<a href="https://github.com/elastic/kibana/pull/5325">#5325</a></li>
	<li>Fixed bug in importing objects in firefox&#xA0;<a href="https://github.com/elastic/kibana/pull/5102">#5102</a></li>
	<li>Fixed bug in date field formatter showing Jan 1 1970 instead of blank&#xA0;<a href="https://github.com/elastic/kibana/pull/5090">#5090</a></li>
	<li>Fixed interpolation in URL field formatter&#xA0;<a href="https://github.com/elastic/kibana/pull/5078">#5078</a></li>
	<li>Fixed window.confirm angular issue&#xA0;<a href="https://github.com/elastic/kibana/pull/5074">#5074</a></li>
	<li>Removed slow spinners on dashboard&#xA0;<a href="https://github.com/elastic/kibana/pull/5022">#5022</a></li>
	<li>Fixed some descriptions in the config file&#xA0;<a href="https://github.com/elastic/kibana/pull/5000">#5000</a></li>
	<li>Fixed an issue negating scripted filters&#xA0;<a href="https://github.com/elastic/kibana/pull/4991">#4991</a></li>
	<li>Fixed export all&#xA0;<a href="https://github.com/elastic/kibana/pull/4970">#4970</a></li>
	<li>Fixed a console error from Ace editor&#xA0;<a href="https://github.com/elastic/kibana/pull/4969">#4969</a></li>
	<li>Handle infinite ranges in filters&#xA0;<a href="https://github.com/elastic/kibana/pull/4959">#4959</a></li>
</ul><p class="p1"><a href="https://github.com/elastic/kibana/pull/4959"></a>
</p></body></html>

Kibana 4.2.1 and 4.1.3 released

Timelion is an Elastic {Re}search project into time series. It lets users answer questions like 'How many pages does each unique user hit over time?' and more.

<p><strong>Update: </strong>The install commands towards the end of this post have been updated to include&nbsp;Kibana 5. <em>You can also try Timelion through <a href="https://www.elastic.co/cloud/as-a-service/signup">Elastic Cloud, our hosted & managed Elasticsearch and Kibana service</a>.</em><br>
</p>
<p>
	So I’m putting together a demo of Kibana, and thinking: <em>I wish I could do more with time series data in Kibana</em>. At the same time, I’d been mulling a new expression syntax for Kibana: <em>What if there was a way to describe queries, transformations and visualization in one place, in one line</em>. I had a trans-atlantic flight the next day, and I had a plan: A tiny, in-flight, one-person, hack-a-thon to build an experiment that scratched both the time series and expressions itches.
</p>
<p>
	By the time I landed in Houston, I had a syntax, a grid of charts and a few simple functions. A few more hours of hacking and I was in Phoenix answering questions I’d never been able to ask before:
</p>
<ul>
	<li>How many pages does each unique user hit over time?</li>
	<li>Whats the difference between this Friday and last Friday?</li>
	<li>What % of Japan’s population came to my site today?</li>
	<li>What’s the 10 day moving average of the S&P 500?</li>
	<li>How what is the cumulative sum of all searches made in the last 2 years?</li>
</ul>
<p>
	Timelion makes all that possible, and more. Timelion is an Elastic {Re}search project into time series, but its more than just an experiment: Its completely usable. By you. Right now.
</p>
<h3>Elastic {Re}search?</h3>
<p>
	{Re}search is Elastic’s lab for cutting edge technology. {Re}search is our playground, the sandbox in which we build our wildest sand castles. {Re}search projects are launched by Elastic engineers that want to grab an idea, run with it, and share it. The projects launched under the {Re}search tag highlight our next-big-things, in packages you can use (and abuse) today. Some are standalone, but many are plugins and extensions for our existing products. We invite you to install, experiment, and communicate your experiences with our {Re}search: Thats why they exist, to gather feedback on our ideas.
</p>
<h3>This is Timelion</h3>
<p>Timelion, pronounced <em>"Timeline",</em> brings together totally independent data sources into a single interface, driven by a simple, one-line expression language combining data retrieval, time series combination and transformation, plus visualization. Every Timelion expression starts with a data source function. For example <code>.elasticsearch(*)</code> (or <code>.es(*)</code> for short). That’s about as simple as it gets right? Count everything in Elasticsearch over time. <strong>Easy peasy</strong>. As you can see, functions always start with a '.' (dot). What if I want to answer that first question above: <em>“How many pages does each unique user hit over time”</em>. Well, I could plot the two parts together on the same chart, by separating them with a comma. But there's a better way ...
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4cd3d8edd48f76936980/download?uid=blt7a967a3524cc15dc?uid=blt7a967a3524cc15dc" data-sys-asset-uid="blt6858173f61f41f74" alt="Screen Shot 2015-11-12 at 2.16.23 PM.png" style="max-width:100%;">We can do more than individual functions, we can chain functions! What I <strong>really</strong> want is to divide total hits by unique users. <strong>WE CAN DO THAT. SCORE. </strong>What we're doing here is saying: Get everything, then divide every point in that series, by every point in this cardinality-of-user-field series I'm passing to <code>.divide()</code>
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4cd312798d8e381fe1cf/download?uid=blt6cc0ad2c799ea10d?uid=blt6cc0ad2c799ea10d" data-sys-asset-uid="blt7e65751490506e7f" alt="Screen Shot 2015-11-12 at 2.14.56 PM.png" style="max-width:100%;">We can do that, we can do more: <strong>Timelion can reach out to other data sources</strong>, using the exact same syntax. For example, the Worldbank’s Data API. Series even can be grouped together into lists with parenthesis and a function applied to the grouping. All data sources can receive an offset argument, eg offset=-1M to compare last month as if it was happening now. Timeline can even fit series with dissimilar intervals to a reference, then enabling you to divide you by-the-minute Elasticsearch series with say, yearly Worldbank data.
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4cd39985d589763775fc/download?uid=blteb5c1c0a3bd9b7a1?uid=blteb5c1c0a3bd9b7a1" data-sys-asset-uid="blt9117e105b1535caf" alt="Screen Shot 2015-11-12 at 2.27.39 PM.png" style="max-width:100%;">
</p>
<p>
	That means we can mix and match these sources, even within the same expression.Thus we can ask crazy questions like “What percentage of the US Gross Domestic Product is my company personally responsible for year-to-date?” Also, if that number is big, how about sharing with your old buddy Rashid? Just kidding. Or am I?
</p>
<h3>Funk-shun Al</h3>
<p>
	There’s 25 different functions, from simple arithmetic like addition and division to moving averages, cumulative sums and derivatives. That said, Timelion functions and data sources are totally pluggable and super easy to write. We’d love your help rounding out the offering, so get hacking!
</p>
<h3>Go get it</h3>
<p>I won't give it all away, there’s more to it than just this post. Timelion will launch a tutorial to step you through configuration and some simple starter functions, the rest is up to you to discover.
</p>
<p>
	Installing it is easy, run this, bounce the Kibana server. and refresh your browser: <code>./bin/kibana plugin -i elastic/timelion</code>. Or you can try it on Found, the best hosted Elasticsearch in the history of the universe, for free: <a href="http://elastic.co/found">Found by Elastic</a>.
</p>
<p><strong>Update:&nbsp;</strong>If you're on 5.x the correct command is: <code>./bin/kibana-plugin install timelion</code>
</p>
<h3>Now use it. Abuse it.</h3>
<p>Once you've installed it, you'll have a new icon in Kibana, which opens the <strong>app switcher</strong><span class="redactor-invisible-space"> and allows you to enter other apps</span>
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4cd33dc542cb38c08e51/download?uid=bltaf362157e84a4d44?uid=bltaf362157e84a4d44" data-sys-asset-uid="bltb6b576d300d1ae45" alt="Screen Shot 2015-11-12 at 5.33.20 PM.png" style="max-width:100%;">
</p>
<p>If you've joined us on Elastic{ON} tour you've already seen this video. If you didn't join us on Elastic{ON}, well, I guess you've learned your lesson? Maybe you should come to <a href="https://www.elastic.co/elasticon">Elastic{ON}<sup>16</sup></a>?
</p>
<div class="video embed-container" style="height: 319.725px;">
	<img style="width: 100%; margin: auto; display: block;" class="vidyard-player-embed" src="https://play.vidyard.com/gX97g6eZwKvBYYpreWzU3L.jpg" data-uuid="gX97g6eZwKvBYYpreWzU3L" data-v="4" data-type="inline">
</div>
<p>Keep an eye on this blog for tips and tricks. Keep an eye on <a href="http://twitter.com/elastic">Elastic's Twitter space</a> for sweet sweet eye candy. Have a great idea? Wrote a new awesome timelion function? <a href="http://github.com/elastic/timelion">Git over here</a>.
</p>

timelion-time-series-composer-kibana.jpg

timelion-time-series-composer-kibana-thumb.jpg

Timelion: The time series composer for Kibana

<html><head></head><body><p>Elasticsearch 2.0 + Kibana 4.2 = &#x1F49A; We&apos;re happy to announce the very first release of Kibana with support for Elasticsearch 2.0. What does that mean for you? Speed. Stability. Sweet new features. If you&apos;re itching to get moving, <a href="/downloads/kibana">grab the download here</a>, now. Otherwise, read on for the fun stuff you can expect in Kibana 4.2
</p><h3>Afraid of the dark?</h3><p>Never! While we always recommend using a light background while composing charts and dashboards, sometimes you want them on a big screen, in a dark room, and nobody wants a bright white screen staring them down. To mitigate that effect, we&apos;ve introduced a dark mode. Now you can comfortably enjoy Kibana dashboards in the NOC, the observatory, my soul, or really anywhere dark.
</p><h3><img width="826px" src="https://api.contentstack.io/v2/assets/575e4cc99e7a83165490cb34/download?uid=blt478e56bf764472a7?uid=blt478e56bf764472a7" data-sys-asset-uid="blt5be85dffc4a5ed80" alt="Screen Shot 2015-10-27 at 1.07.12 PM.png" style="max-width:100%;"></h3><h3><br>Custom map providers</h3><p>Kibana&apos;s included map provider is a great, but we heard you wanted more options. If you fancy yourself a deft map handler, try out Kibana 4.2&#x2019;s support for WMS background maps. WMS is super powerful and there&apos;s a wealth of free services providing them, including the US Geological Survey: <a href="http://viewer.nationalmap.gov/example/services/serviceList.html">http://viewer.nationalmap.gov/example/services/ser...</a>
</p><h3><img width="826px" src="https://api.contentstack.io/v2/assets/575e4cca9985d58976377464/download?uid=blt8e63805d680929ff?uid=blt8e63805d680929ff" data-sys-asset-uid="blt1eeca8ea1ed60e40" alt="Screen Shot 2015-10-27 at 1.45.38 PM.png" style="max-width:100%;"></h3><h3><br>What&apos;s the scenario?</h3><p>If something is wrong, we want you to know right away, so we&apos;ve created a server status page that will give you an overview of how Kibana is operating at that very moment, and if there are&#xA0;any components that need your attention. Of course, if you just need the comfort of knowing everything is a-okay, it&apos;s always available right away from the Status tab under settings.
</p><h3><img width="826px" src="https://api.contentstack.io/v2/assets/575e4cc93dc542cb38c08cc5/download?uid=blt762d0893b3a3f956?uid=blt762d0893b3a3f956" data-sys-asset-uid="bltf6792141d1b09b1a" alt="Screen Shot 2015-10-27 at 1.41.06 PM.png" style="max-width:100%;"></h3><h3>Faster in every way</h3><p>Browser refreshes happen faster than ever thanks to the new code bundling system in Kibana 4.2 that optimizes the code it serves to just what you need at that moment. Also, remember memory? <del>Pepperidge Farm</del> Kibana remembers. Kibana 4.2 includes a big memory cleanup allowing long long long running dashboards while maintaining a small small small memory footprint.
</p><h3>And oh so much more...</h3><p>There are tiny tweaks around every corner and we&#x2019;ve laid the groundwork for some really exciting stuff in the coming weeks, so stay tuned to <a href="http://elastic.co/blog">the Elastic blog</a>, our <a href="https://twitter.com/elastic">twitter account</a>, and the <a href="https://github.com/elastic/kibana">Kibana Github repo</a> and don&#x2019;t miss a moment of the <del>monster truck</del> <strong>analytics</strong> action.
</p></body></html>

kibana-420-release.jpg

Kibana 4.2.0 released

Kibana 4.2 beta 2 is announced and the various improvements and new features include the return of dark dashboards, custom map URLs, and more.

<html><head></head><body><p>Kibana 4.2 is almost here. Any day now. Just around the corner. Wait for it&#x2026;or don&#x2019;t. Why wait? Who likes waiting? I don&#x2019;t. Instant gratification awaits within. It can be yours, today. Now. Right now. <a href="https://www.elastic.co/downloads/kibana">Download Kibana 4.2 beta 2</a>, and <a href="https://www.elastic.co/downloads/past-releases/elasticsearch-2-0-0-beta2">Elasticsearch 2.0 beta 2</a> to go with it, right now. You are young and life is long and there is time to kill today, so read on for the &#x201C;deets&#x201D; as the kids like to say. At least I think they say that, right?
</p><p><strong>Custom map URLs</strong>&#xA0;
</p><p>Kibana now supports WMS map servers, and thus no longer needs internet access for tile map visualizations. That said, you&#x2019;ll need to supply your own tiles if you&#x2019;re going that route, but there&#x2019;s also a plethora of totally open WMS servers out there.
</p><p><img src="https://api.contentstack.io/v2/assets/575e4cb73dc542cb38c089ab/download?uid=blt84cc35d6d5ab94f4?uid=blt84cc35d6d5ab94f4" data-sys-asset-uid="blt0f93021a22aa345b" alt="6d2d7c94-45a0-11e5-8185-a8e606cba9d3-1.png" width="787">
</p><p><strong>Dark Dashboards</strong>&#xA0;
</p><p>No one more blinding NOC screens! The dashboard now has a switch to turn out the lights! Great for status dashboards in dark rooms. I mean, not literal dark rooms, not photo negative processing friendly, but you probably know that if you&#x2019;re developing film in your closet.
</p><p><img src="https://api.contentstack.io/v2/assets/575e4cb79e7a83165490c83a/download?uid=blt276ba5e44f309cf2?uid=blt276ba5e44f309cf2" data-sys-asset-uid="blt6129b1930abaac72" alt="unnamed.png" width="787">
</p><p><strong>And more</strong>
	We&#x2019;ve fixed lots of bugs with importing and exporting objects, scripted fields, and complex dashboard performance. And of course, there&#x2019;s more to come, but don&#x2019;t let that stop you from trying out Kibana 4.2 beta 2 today!
</p><p>Ok, there it is! Enjoy! As always, <a href="https://github.com/elastic/kibana">ping us on GitHub</a> with issues, suggestions and contributions. Or, if you love IRC like we do, join us in #kibana on Freenode. You can also find us at <a href="https://discuss.elastic.co/c/kibana">discuss.elastic.co</a>
</p></body></html>

dark-side-of-moon-flickr-earth-shine.jpg

dark-side-of-moon-flickr-earth-shine-thumbnail.jpeg

Kibana 4.2 beta 2: The dark side of the moon

<html><head></head><body><p>Kibana 4.1 is now available for your data dicing, stat splicing, log munching, chart crunching enjoyment. In addition to a fork load of great new features, we&apos;ve put a big focus on performance in Kibana 4.1, improving responsiveness across the board and reducing memory consumption by as much as 10x. Kibana 4.1 does more, and does it all more quickly. Can&apos;t wait? <a href="/downloads/past-releases/kibana-4-1-0">Grab Kibana 4.1.0 now</a>. Otherwise, dig into the juicy details below.
</p><h3>Axis Awesomeness</h3><p>Spikes. You deal with them often. Server load hits the ceiling, prices jump for a moment. Kibana 4.1 brings support for logarithmic axis in the line chart. Logarithmic scales allow you to smooth out those big spikes so that the important details aren&apos;t unduly impacted by one big event. Speaking of smooth, we&apos;ve introduced smoothing to line and area charts. Sure, smooth lines are a lie, but they&apos;re your lie and they sure do look good!
</p><p><img src="https://api.contentstack.io/v2/assets/575e4c7512798d8e381fd247/download?uid=blt17c19ee393ce296e?uid=blt17c19ee393ce296e" data-sys-asset-uid="blt7ecea90a15c0146e" style="max-width:100%;">
</p><h3>Bubble charts</h3><p>But thats not all we&apos;ve done with line charts. We&apos;ve also introduced a new metric dimension for line charts called **dot size**. This new metric lets us define the size of the dots placed on the line based on some other metric. For example, is the bandwidth used to serve large files potentially impacting my ability to handle more users?
</p><p><img src="https://api.contentstack.io/v2/assets/575e4c750342dfd738262cba/download?uid=bltf308b86d51bd4ecc?uid=bltf308b86d51bd4ecc" data-sys-asset-uid="bltfc5257add8d1db9c" style="max-width:100%;">
</p><h3>New aggregations</h3><p>To help you utilize those new visualization modes we&apos;ve built support for more elasticsearch aggregations including <strong>percentile ranks</strong> and <strong>date ranges</strong>.
</p><h3>Map Madness</h3><p>In addition to improvements to how we communicate the nature of the map projection, we added the ability to render a heat maps. And because heat maps are built using HTML canvas, instead of SVG, they&apos;re super fast, enabling you to crank up the precision of the aggregation. Plus, when you need to drill in, we&apos;re added geographic filters. Draw and box and we&apos;ll filter your request down to just the region you&apos;re interested in.
</p><p><img src="https://api.contentstack.io/v2/assets/575e4c750342dfd738262cb9/download?uid=blt7d63b3bfcbf986d0?uid=blt7d63b3bfcbf986d0" data-sys-asset-uid="bltb136d1e0aff7e2ac" style="max-width:100%;">
</p><h3>Put a pin in it</h3><p>Speaking of filters, we&apos;re introducing the concept of **pinned filters**. We just can&apos;t stop using this feature, I don&apos;t know how we lived with out it. Imagine you&apos;re on a dashboard and you&apos;ve filtered the view down to using a combination of filters. Now you want to jump back to discover and dig into the documents, or create a new visualization looking at only that filtered data. With filter pinning you can. Pinning a filter means it sticks with you no matter where you go in the app. So if you create a filter in Discover and pin it, it will still be there when you head over to the Dashboard.&#xA0;
</p><p><img src="https://api.contentstack.io/v2/assets/575e4c753dc542cb38c07e0b/download?uid=bltce843be10e184a77?uid=bltce843be10e184a77" data-sys-asset-uid="blt3bcf8bb4c2c5a590" style="max-width:100%;">
</p><p>And when you&apos;re on that dashboard, don&apos;t miss that new option when you go to save. If you&apos;re a Kibana 3 user you may remember that your time filter was always saved with the dashboard. We&apos;ve brought that option back in Kibana 4.1: Select <strong>Store time with dashboard</strong> and Kibana will return you to right where you left off when you load the dashboard.
</p><h3>Field formatting</h3><p>We&apos;ve always wanted you to see your data how you want it. While aggregations allow us to compose complex, expressive, visualizations, we wanted to be able to do that same thing with the actual values of fields. Thus, we&apos;ve introduced field formatters in Kibana 4.1. Now you can continue to index your data just how you&apos;d like it, as numbers, or unformatted strings, and let Kibana do the rest. For example, format numbers as bytes, or URL strings as links. URL formatting even support templates allowing you to use Kibana data to create custom links to other applications.
</p><p><img src="https://api.contentstack.io/v2/assets/575e4c7458208ba076e27c43/download?uid=blt8d4711ed29077525?uid=blt8d4711ed29077525" data-sys-asset-uid="bltfc3b2678d383c5cd" style="max-width:100%;">
</p><h3>And so much more</h3><p><strong></strong>That isn&apos;t even close to everything in Kibana 4.1. You&apos;ll discover improved functionality around every corner. We&apos;ve streamlined where we can and reduced unnecessary configuration whenever possible. We&apos;ve fixed dozens of bugs and added important management features, like importing and exporting schemas, and fine grained timeout configuration. Download Kibana 4.1 and give it a shot!
</p><h3>Engage</h3><p>Of course Kibana is a product of your input and insight. We wanted to make it easier for you to stay up to date, try out the latest and great, and contribute to the project. We&apos;ve begun publishing <a href="https://github.com/elastic/kibana#snapshot-builds">snapshot builds of the latest Kibana</a> code to let you ride the knife edge. Have a question? Join us on the new <a href="https://discuss.elastic.co/c/kibana">Kibana forum at discuss.elastic.co</a>. Have a bug? <a href="https://github.com/elastic/kibana">Let us know on github</a>. Make something great? Tell <a href="https://twitter.com/elastic">@elastic</a> about your #kibana dashboards on twitter. Happy data hunting!
</p></body></html>

​​Kibana 4.1: Summer fun for everyone

<html><head></head><body><p>Kibana 4.0.3 is now available!&#xA0;Can&apos;t wait to read the rest?&#xA0;<a href="/downloads/kibana">Download Kibana 4.0.3</a>&#xA0;now. Otherwise read on for details.
</p>
<p>As you know, we&#x2019;re constantly working to build new, awesome&#xA0;features into Kibana. If you didn&#x2019;t know that, you should get out the weekly <a href="https://www.elastic.co/search?q=Kurrently" target="_blank">Kurrently in Kibana</a>&#xA0;series. At the same time we&#x2019;re building new stuff, we&#x2019;re&#xA0;working to stabilize, secure and enhance the features you already know and love. Today we&#x2019;re releasing Kibana 4.0.3 with over two dozen fixes and tweaks to make everyday Kibana life better.<br>
</p>
<p class="p1"><strong>Highlights include fixes to</strong>
</p>
<ul>
	<li>Time controls</li>
	<li>Tooltips</li>
	<li>Visualization legends, labels and axis</li>
	<li>Table field formatting</li>
	<li>Elasticsearch timeouts</li>
	<li>Elasticsearch Shield behavior</li>
	<li>A dozen other, less&#xA0;noticeable,&#xA0;bits</li>
</ul>
<p class="p1">We also undertook an extensive string sanitization audit and identified a few potential security issues worth fixing. For details see our&#xA0;<a href="/community/security">Security Status page</a>. We strongly encourage everyone to upgrade to Kibana 4.0.3, and to stay tuned to this blog for more in the near future!
</p></body></html>

Kibana 4.0.3 is available

<html><head></head><body><p class="p1">
	<span class="s1">Today we&apos;re releasing Kibana 4.0.2 with a number of important bug fixes and a smattering of small tweaks that make the Kibana experience just that tiny bit better!</span>
</p><p class="p1">
	<span class="s1">Grab the new release here:&#xA0;<a href="http://www.elasticsearch.org/overview/kibana/installation/" title="Kibana 4 Download">Download Kibana 4.0.2</a>&#xA0;or read on for the juicy details.&#xA0;For more information on Kibana 4, see the GA&#xA0;blog post:&#xA0;<a href="http://www.elasticsearch.org/blog/kibana-4-literally/" title="Kibana 4 release blog post">Kibana 4. Literally.</a></span>
</p><h2>Small enhancements</h2><ul>
	<li>Added refresh interval to the URL (<a href="https://github.com/elastic/kibana/pull/2949">#2949</a>)</li>
	<li>Allowed for the display of _timestamp in the doc-table when added to the metaFields advanced setting (<a href="https://github.com/elastic/kibana/pull/3259">#3259</a>)</li>
	<li>Allowed for decimal inputs in the range aggregation (<a href="https://github.com/elastic/kibana/pull/3281">#3281</a>)</li>
	<li>Added highlighting in the case of multi-fields. For example, exact matches on &#x201C;.raw&quot; fields will now be highlighted (<a href="https://github.com/elastic/kibana/pull/3297">#3297</a>)</li>
	<li>Added a nice JSON editor to the advanced object editor (<a href="https://github.com/elastic/kibana/pull/3280">#3280</a>)</li>
	<li>Switched map tiles to use HTTPS (<a href="https://github.com/elastic/kibana/pull/3401">#3401</a>)</li>
	<li>Added a filler for blank strings in the Quick Count dialog (<a href="https://github.com/elastic/kibana/pull/3341">#3341</a>)</li>
	<li>Kibana now only waits for its own Elasticsearch index to be ready, instead of the entire cluster&#xA0;(<a href="https://github.com/elastic/kibana/pull/3421">#3421</a>)</li>
</ul><h2>And a few fixes</h2><ul>
	<li>Fixed several bugs in which certain chains of interaction would put the index pattern creator into a confusing state&#xA0;(<a href="https://github.com/elastic/kibana/pull/3491">#3491</a>,&#xA0;<a href="https://github.com/elastic/kibana/pull/3444">#3444</a>)</li>
	<li>Fixed a bug in saving disabled, then deleted, filters&#xA0;(<a href="https://github.com/elastic/kibana/pull/3480">#3480</a>)</li>
	<li>Fixed a bug in which timestamped index patterns might show an incorrect hit count in Discover (<a href="https://github.com/elastic/kibana/pull/3478">#3478</a>)</li>
	<li>Fixed modification of booleans and arrays in Advanced Settings (<a href="https://github.com/elastic/kibana/pull/3493">#3493</a>)</li>
	<li>Fixed the visualization of time fields from the discover field chooser (<a href="https://github.com/elastic/kibana/pull/3443">#3443</a>)</li>
	<li>Fixed saving of maps that were created from the field chooser (<a href="https://github.com/elastic/kibana/pull/3422">#3422</a>)</li>
	<li>Removed an extra click handler that could cause searches to run twice (<a href="https://github.com/elastic/kibana/pull/3427">#3427</a>)</li>
	<li>Fixed support for client SSL certs (<a href="https://github.com/elastic/kibana/pull/3363">#3363</a>)</li>
	<li>Fixed a case of poor error handling when all elasticsearch shards fail (<a href="https://github.com/elastic/kibana/issues/3279">#3279</a>)</li>
	<li>Changed the behavior of &#x201C;preserve_host&quot; to correctly pass the `Host:` header through to Elasticsearch as intended (<a href="https://github.com/elastic/kibana/pull/3287">#3287</a>)</li>
	<li>Changed the display of linked searches in Visualize to contain the title of the search instead of its Elasticsearch ID (<a href="https://github.com/elastic/kibana/pull/3283">#3283</a>)</li>
	<li>Fixed an issue where some browser would add scrollbars to split charts (<a href="https://github.com/elastic/kibana/pull/3256">#3256</a>)</li>
</ul></body></html>

Kibana 4.0.2 Released

<html><head></head><body><p>
Like the rest of the Elastic&#xA0;engineering team, the Kibana gang gathered for nearly a week of food, fun (a.k.a. beer) and, shockingly, a bit of work too. Let&apos;s be honest, not much code got written, and not many pulls were merged, but we did get some important face to face 
	<del>shouting</del> <del>drinking</del> <del>hugging</del> <i>decision making</i> done.
</p><h2>Planning for Kibana&#xA0;4.2</h2><p>
	Four dot 
	<strong>two</strong> you say? What happened to Kibana&#xA0;4.1? It&apos;s in progress as we speak. We&apos;ve been hard at work on Kibana&#xA0;4.1&#xA0;since before Kibana&#xA0;4.0 GA dropped. If you&apos;re interested in Kibana&#xA0;4.1&apos;s key features check out the <a href="https://github.com/elastic/kibana/issues?q=is%3Aopen+is%3Aissue+label%3A4.1.0">Kibana 4.1 issues on Github</a>. That said, we always have our eye on tomorrow to confirm the decisions we make today, so we took the opportunity to nail down the Kibana&#xA0;4.2 feature set while we were all together in Mountain View, California. So whats up with Kibana 4.2? The big stuff includes:
</p><h3>A startup page</h3><p>
	Kibana currently waits for Elasticsearch to startup before it starts up, however it doesn&apos;t make the Kibana web&#xA0;server available until the Elasticsearch startup process is done. We think the better bet is to show you what we&apos;re waiting on, and why, in the browser. So we&apos;re designing a startup status page for Kibana that will be available even when Elasticsearch isn&apos;t.
</p><h3>Document CSV export</h3><p>
	 We&apos;re taking export beyond the chart! Kibana&#xA0;4.2 will allow for exporting documents from Elasticsearch in a columnized CSV perfect for importing into spread sheets or munging with with command line tools.
</p><h3>Authentication</h3><p>
	 We&apos;re building a lightweight authentication framework with session support. This will allow for functionality such as logout and timeout, even when paired with HTTP basic auth in Elasticsearch. We plan to build this in an expandable fashion to allow for authenticating against custom services. In the first phase this will be limited to authentication, we plan in the future to allow for permissions on individual dashboards and other stored resources.
</p><h3>Log event context extraction</h3><p>
	 When you&apos;ve finally found that one log you need, you often need to know how it got there. Often you need to see the logs around that log, and Kibana 4.2 will enable that.
</p><h3>And oh so much more</h3><p>
	 Want to see it all? Every last thing we&apos;re working on for Kibana&#xA0;4.2.0? Check out the&#xA0;<a href="https://github.com/elastic/kibana/issues?q=is%3Aopen+is%3Aissue+label%3A4.2.0">Kibana 4.2 issue list on Github</a></p><h2>Oh, also a&#xA0;Zero</h2><p>
	In addition to planning 4.2, we also planned 4.0.2, our next bug fix release. While there&apos;s no major bugs, we&apos;re always&#xA0;looking to fix the little things. Our prime method of this is the&#xA0;end-of-the week party we shamelessly cribbed from the Elasticsearch team called <strong>Fix It Friday</strong>. Every Friday we siege the living day lights out of the easily squash-able bugs, small feature requests and well scoped pull requests so they don&apos;t get lost in the noise and get the attention they deserve.</p><h2>And more!</h2><p>
What else have we been up to in the last few days? All of this jazz is in the master branch right now. You&apos;ll find it all in upcoming releases! Here&apos;s a few of the highlights:
</p><h3>Bubble charts!</h3><p>
	This allows for sizing the dots in a line chart according to the result of a metric aggregation, effectively adding another visual dimension. We also enabled the disabling of the connecting lines.</p><p><img src="https://api.contentstack.io/v2/assets/575e4d9e3dc542cb38c0b1b0/download?uid=bltcc7f77dcf6bda582?uid=bltcc7f77dcf6bda582" style="width: 577px; height: 278.090206185567px;"></p><h5><br></h5><h3>_timestamp in tables</h3><p>
	Until a few days ago, _timestamp was available for aggregations but not for viewing. Thats fixed now, along with a bug that could cause changes to the metaFields parameter to be ignored.
</p><h3>ACE editor in the object editor</h3><p>
	We actually intended to have this, but it was excluded from the build. This allows for nicely formatted JSON in the stored object editor.
</p><h3>Highlighting for multi-field mappings (e.g., .raw)</h3><p>
	In previous versions highlighting was not supported for fields that don&apos;t actually exist in _source. That&apos;s no longer the case, we make a run at highlighting everything possible now, even logstash&apos;s .raw fields.</p><h3>Decimals in the range aggregation</h3><p>
	In some browsers type=number was being treated as only whole numbers. We fixed that.
</p><h2>More Next Week</h2><p>As you may have seen, we&apos;re now publishing weekly updates on Elasticsearch and Apache Lucene, Logstash and Kibana. We&apos;ll bring you the latest and greatest in next week&apos;s <em>Kurrently in Kibana</em>.</p><p><br></p></body></html>

Kurrently in Kibana: Planning for Kibana 4.2

<html><head></head><body><p>Today we make available the first update to Kibana 4 incorporating a number of important usability and stability fixes.</p><p>Grab the new release here: <a href="http://www.elasticsearch.org/overview/kibana/installation/" title="Kibana 4 Download">Download Kibana 4.0.1</a><br>
For more information on Kibana 4 see the original release blog post: <a href="http://www.elasticsearch.org/blog/kibana-4-literally/" title="Kibana 4 release blog post">Kibana 4. Literally.</a></p><h3>Upgrades and Polling for Elasticsearch</h3><p>Kibana 4.0.1 improves on the upgrade process in 2 ways in an attempt to make both upgrades to Kibana and to Elasticsearch more seamless. </p><ul>
<li>Upgrades from 4.0.0-RC1 and above to 4.0.1 apply cleanly and automatically, without the need to run a migration script. We expect this to be the case into the future</li>
<li>Kibana 4 performs the upgrade on startup, thus Elasticsearch must be available. In Kibana 4.0.0 the server startup would fail if Elasticsearch had not fully started. In Kibana 4.0.1 the server will poll for Elasticsearch until it is ready.</li>
</ul><h3>bug fixes</h3><p>In addition to the two big items above we also fixed a variety of other issues, including: </p><ul>
<li>Fixed the momentary flash of the title bar in iframed charts and dashboards</li>
<li>Fixed the Windows-specific kibana.bat to work with paths that have spaces</li>
<li>Fixed a bug in which pie chart slice color could become disconnected from the legend</li>
<li>Removed the doc_value warning when dealing with analyzed strings as analyzed strings can not have doc_values.</li>
<li>Removed the undocumented and unsupported HOST and PORT environmental variables that were causing issues when telling Kibana to bind to some other interface or port.</li>
<li>Fixed links in Discover to documents with a _id containing slashes.</li>
<li>Controller initialization will now properly abort when dependancies are not met.</li>
</ul></body></html>

Kibana 4.0.1 Released

<html><head></head><body><p>
	By now you may have spotted those crafty little arrow buttons in the 
	<em>Visualize</em> screen of Kibana 4 and said &#x201C;Hey, what are you doing over there? And what are you up to?&quot;. Well, those buttons control the <strong>aggregation execution order</strong>. This concept defines how Elasticsearch goes about analyzing your data, and how Kibana displays the result.
</p><p>
	<img class="img-responsive" src="https://api.contentstack.io/v2/assets/575e4d899985d58976379456/download?uid=blt149543cc1ba1a878?uid=blt149543cc1ba1a878">
</p><p>
	Let&apos;s define a common scenario: 
	<strong>Find me the most active users over time</strong>. Easy enough right? Well yes, but your demand is ambiguous and your goals are unclear. What defines the &#x201C;most active users&quot;? Let&apos;s set more parameters: <strong>One year, by week, top 5 users</strong>. Now we&apos;re getting closer, but there are two ways we can interpret all that:
</p><ol>
	<li>The top 5 users for the year, and their activity each week</li>
	<li>Each week&apos;s top 5 users, for a year</li>
</ol><h3>Top 5 users in each week, for a year</h3><p>
	In this screenshot, we run the date histogram first, followed by asking for the top 5 users. This creates a bucket for each week of the year. Within each of those weeks, we find the top 5 users. Because that top 5 could be, and is in this case, different from week-to-week, you see far more than 5 users in the legend.
</p><p>
	Further, if we look at the aggregation request in the shaded section, we can see the date histogram is requested first, with the terms aggregation within the date histogram. The result is that we see weeks in which some user has an outsized activity, even if they haven&apos;t been active in any other portion of the year. This lets us spot outliers in any given week.
</p><p>
	<img class="img-responsive" src="https://api.contentstack.io/v2/assets/575e4d893dc542cb38c0add3/download?uid=blt55db395fe5ef734a?uid=blt55db395fe5ef734a">
</p><h3>Top 5 users for the year, and their weekly activity</h3><p>
	Now, we click the up arrow to move the terms aggregation above the date histogram. We now calculate the top 5 users over the entire year, then create a date histogram for each. This results in just 5 legend values. However, we now see the users that are consistently very active instead of the spikey outliers.
</p><p>
	<img class="img-responsive" src="https://api.contentstack.io/v2/assets/575e4d8a9e7a83165490eab5/download?uid=blt514a7b2d3712af0b?uid=blt514a7b2d3712af0b">
</p><h3>Go forth and aggregate</h3><p>
	So there you go: those arrows matter. Aggregation execution order applies to almost every chart in Kibana and significantly influences both what you see on the chart, as well as the conclusions you can draw from the data.
</p><p>
	And finally, if you think you have a good Kibana success story, we&apos;d love to hear it. Give us a shout at 
	<a href="mailto:stories@elastic.co">stories@elastic.co</a> or <a href="http://www.twitter.com/elasticsearch">on Twitter</a> and we&apos;ll help share your successes with the world!
</p></body></html>

Kibana, Aggregation Execution Order, and You

<html><head></head><body><p>
	Kibana 4 is now, literally, figuratively, conceptually, spiritually, and deliciously production ready. Ok, it was ready a week ago, but we wanted to make absolutely sure that we were totally happy with it. And we are, and we want to share the happiness that is Kibana 4.0.0 GA with you. Gratuitous screenshots and backstory below. If you&apos;re just too excited for all of that, we&apos;ve devised a two-step plan:
</p><ol>
	<li> Get it. From the <a href="/downloads/kibana" title="Kibana 4 Downloads">Kibana 4 downloads</a> page</li>
	<li> Grok it. In the <a href="/guide/en/kibana/current/index.html" title="Kibana 4 docs">Kibana 4 docs</a></li>
</ol><p>
	<strong>Tip:</strong> If you haven&apos;t already, you will need to upgrade your cluster to <a href="/downloads/past-releases/elasticsearch-1-4-4" title="Elasticsearch 1.4.4" target="_blank">Elasticsearch 1.4.4</a><br>
	<strong>Tip 2:</strong> If you&apos;re upgrading from Kibana 4 RC1, you&apos;ll need to migrate your config. <a href="https://gist.github.com/spalger/8daf6c2b7f2954639e38" title="kibana 4 rc1 to ga migrate script">See this gist to migrate</a>
</p><h3>The back story</h3><p>
	Kibana has always been a tool for solving problems. Why am I getting paged at 2am every night? When did that code get pushed to production?  Did it break something as a result? Well, we solved all of those. Globally, for years, not a single person has been paged at 2am. I know, right?
</p><p>
	<img class="img-responsive" src="https://api.contentstack.io/v2/assets/575e4d89d8edd48f769388b5/download?uid=blt3d2274216ae3ab8d?uid=blt3d2274216ae3ab8d">
</p><p>
	<i>But there&apos;s a catch:</i> As the answers get easier, the questions get harder. The easy wins were easy. Now, let&apos;s solve the hard problems, the problems three layers deep. Let&apos;s solve the problems that require analyzing multiple dimensions, multiple fields, and multiple data sources. Kibana 4 is us, working together, to solve the hardest problems in the least amount of time, and with the least hassle.
</p><p>
	We took everything we learned from Kibana 3 and applied it to Kibana 4. Why settle for one thousand points on a map, when we could have one billion? Why settle for one field on a chart? Or one chart in a panel? Why just one index on a dashboard? Let&apos;s generate 5 scenarios, comparing data across 2 fields and put them all on a dashboard with data from 3 indexes. Yeah. Let&apos;s do that, then let&apos;s go get ice cream. With sprinkles.
</p><p>
	<img class="img-responsive" src="https://api.contentstack.io/v2/assets/575e4d8912798d8e38200009/download?uid=blta81814c9851df2c3?uid=blta81814c9851df2c3">
</p><h3>The plot</h3><p>
	Like ice cream, problems come in many flavors. To that end, we&apos;ve divided Kibana up neapolitan style, except we left out that flavor you don&apos;t like. If you&apos;re a long-term Kibana user, you&apos;ll feel right at home on the first tab 
	<em>Discover</em>. This allows you to quickly iterate on searches, find records, and keep solving the easy problems that are quickly corrected by finding that one line that tells the whole story.
</p><p>
	<img class="img-responsive" src="https://api.contentstack.io/v2/assets/575e4d8958208ba076e2ab6c/download?uid=blt36c3f01e2d1f9048?uid=blt36c3f01e2d1f9048">
</p><p>
	When things get more complex than simple search can account for, it&apos;s time to make magic with charts and graphs. Dive into the 
	<em>Visualize</em> tab to break down data with the power of Elasticsearch aggregations. <em>Visualize</em> exposes the multi-dimensional nature of data and lets you build charts, tables and maps that quickly answer the kind of questions you never would have known to ask before. The question you might have asked first was &#x201C;Why was the site slow last week?&quot;, but the question revealed by the data is &#x201C;Why did the average file size of requests made from Tokyo spike on Christmas day?&quot;
</p><p>
	<img class="img-responsive" src="https://api.contentstack.io/v2/assets/575e4d890342dfd738265d43/download?uid=blt0119c3d25f24628b?uid=blt0119c3d25f24628b">
</p><p>
	Finally, bring it all together on the 
	<em>Dashboard</em>. Put it on the big screen and say: &#x201C;There&apos;s your answer and here&apos;s a link for later. Also, I embedded it in the wiki, mailed you a csv export of the data, ate some ice cream and wrote the first chapter of my autobiography. Now get me more ice cream, I earned it.&quot;
</p><p>
	<img class="img-responsive" src="https://api.contentstack.io/v2/assets/575e4d8958208ba076e2ab71/download?uid=blt8a24d761d9de20f3?uid=blt8a24d761d9de20f3">
</p><p>
	For a more in-depth look at each tab, check out the 
	<a href="/blog/kibana-4-beta-1-released" title="Kibana 4 Beta 1: Released">Kibana 4 Beta 1: Released</a> blog post.
</p><h3>To be continued&#x2026;</h3><p>
	It&apos;s probably time for a nap right? Nope. Kibana 4.1 is already in the works and we have big plans for the future. Much effort went into making the underpinnings of Kibana 4 stable and sensible, giving us a platform to build the future of Elasticsearch applications upon. The entire thing was designed to be extended. For example, visualizations were built to be, well, built upon. Open source is more than a GitHub account to us, it&apos;s our commitment to creating a structure that enables everyone to build new amazing things.
</p><p>
	Watch 
	<a href="/blog" title="Elastic Blog">our developer blog</a> space for articles on building your own Kibana visualizations and creating your own applications that work with Elasticsearch. Want a sneak peek? Check out Spencer Alger&apos;s talk at <a href="http://www.elasticon.com/" title="ElasticON">Elastic{ON}<sup>15</sup></a>.
</p><p>
	We wouldn&apos;t be here without you, and we&apos;re not going anywhere without your help, so please, ping us on 
	<a href="https://github.com/elasticsearch/kibana " title="Github" target="_blank">GitHub</a> with issues, suggestions, and contributions. Or, if you love IRC like we do, join us in #kibana on Freenode.
</p><h3>Extra credit</h3><p>
	Want the whole Kibana 4 story as it happened? Check out the previous blog posts from the Kibana 4 beta series:
</p><p>
	<a href="/blog/kibana-4-beta-1-released" title="Kibana 4 Beta 1: Released">Kibana 4 Beta 1: Released</a><br>
	<a href="/blog/kibana-4-beta-2-get-now" title="Kibana 4 Beta 2: Get it now">Kibana 4 Beta 2: Get it now</a><br>
	<a href="/blog/kibana-4-beta-3-now-more-filtery" title="Kibana 4 Beta 3: Now more filtery">Kibana 4 Beta 3: Now more filtery</a><br>
	<a href="/blog/kibana-4-rc1-is-now-available" title="Kibana 4 RC1 is freshly baked">Kibana 4 RC1: Freshly baked</a>
</p><p>
	And finally, if you think you have a good Kibana success story, we&apos;d love to hear it. Give us a shout at stories@elastic.co or 
	<a href="http://www.twitter.com/elasticsearch">on Twitter</a> and we&apos;ll see how we can share your successes with the world!
</p></body></html>

Kibana-literally.jpg

Kibana 4. Literally.

<html><head></head><body><p>The first release candidate of Kibana 4 is ready to colorize, stackify, bar-a-tize, and pie-u-late. You may notice the second letter of the greek alphabet is conspicuously absent in the title. Yep, this isn&#x2019;t a beta. What does that mean for you? It means we&#x2019;ve sanded down the rough edges and shined up the whole shebang! It also means improved stability, performance, and yes, some fun new features too. </p>
<p>The good stuff is below, but if you want to jump right in then upgrade to Elasticsearch 1.4.3 and grab the new build over on the <a href="/downloads/kibana" title="Download Kibana 4 RC1" target="_blank">Kibana 4 download page</a> right away.</p>
<h3>A couple tips</h3>
<ol>
<li>I mean it about that upgrade to Elasticsearch 1.4.3 thing. Kibana 4 RC1 depends on functionality in Elasticsearch 1.4.3.</li>
<li>Update your kibana.yml, several configuration parameters have changed. For example, <code>elasticsearch</code> is now <code>elasticsearch_url</code></li>
</ol>
<h2>Multi series charts</h2>
<p>Kibana 4 now supports multiple metric aggregations on each chart. For example, displaying the minimum, maximum and average of a field, or multiple totally unrelated fields, on a single plot. We&#x2019;ve also added the much requested percentiles aggregation as well as a view of standard deviation.</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4d889e7a83165490ea74/download?uid=blt848a6990fb5ece37?uid=blt848a6990fb5ece37" style="max-width:100%;"></p>
<h2>Partial bucket indication</h2>
<p>You may have noticed in many analytics engines everything always seems to be trending down at the last point. This behavior is usually due to the last bar not being &#x201C;full&#x201D;. For example, a daily bar chart, in which today isn&#x2019;t over yet. Kibana now shows you how much time is left in the day by subtly shading the chart to indicate that more data may be forthcoming when working with time based series.</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4d8812798d8e381fffda/download?uid=blt7955f8d27974c85a?uid=blt7955f8d27974c85a" style="max-width:100%;"></p>
<h2>Document tables on the dashboard</h2>
<p>In addition to saved visualizations, Kibana can now show saved searches on the dashboard. Add them in the same way you would add a visualization, but take note of that &#x201C;Searches&#x201D; tab. Kibana will load your saved search, along with its columns and sort order into a table on the dashboard.</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4d8812798d8e381fffdb/download?uid=blt9c6652ee7f5c08b4?uid=blt9c6652ee7f5c08b4" style="max-width:100%;"></p>
<h2>Markdown widget and table filtering</h2>
<p>Tired of answering the question: &#x201C;What does this line here mean?&#x201D; The markdown widget allows you to add helpful informational panels to complex dashboards. Plus, the data table visualization now supports the same click-to-filter functionality that every other panel supports.</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4d880342dfd738265d18/download?uid=blt095bd92259a0d4b2?uid=blt095bd92259a0d4b2" style="max-width:100%;"></p>
<h2>Filtering on Scripted fields</h2>
<p>Beta 3 disallowed filtering on scripts. RC1 enables filtering on scripts via completely transparent support for Elasticsearch&#x2019;s script filter. Click to filter on scripted field values just like you would anywhere else.</p>
<p>Kibana 4 RC1 also switches over to <a href="/guide/en/elasticsearch/reference/current/modules-scripting.html#_lucene_expressions_scripts">Lucene Expressions</a> from Groovy due to the release of Elasticsearch 1.4.3. While Lucene expressions only support numeric values and functions for now, we&#x2019;re working hard to bring in support for strings, dates, and more.</p>
<h2>Auto-refresh</h2>
<p>Auto refresh is back! And it uses the same federated request system for simultaneous panel updates that Kibana uses everywhere else. And, of course, it works everywhere, including Discover, Visualize, and Dashboard.</p>
<h2>NodeJS backend</h2>
<p>We&#x2019;ve switched away from the Java (aka jRuby) based backend to a new, faster, more compatible, NodeJS-based backend. No need to worry, we package up the right version of NodeJS with the Kibana distribution and with no more Java dependency setup is even easier. The start process is still exactly the same: ./bin/kibana, except startup is nearly instant!</p>
<p>The flip side is that you will need to download the right package for your operation system. As an entirely unrelated compensation for the operating system specific distribution, we&#x2019;ve dropped in SSL support totally gratis, both from the browser and to Elasticsearch. </p>
<h2>And more</h2>
<p>Order now and we&#x2019;ll throw in a set of steak knives. No, not really, but we will throw in formatted CSV exports, improved negative number handling, and a slick new style! Who knows what else we&#x2019;ve hidden in there? Something? Nothing? The only way you&#x2019;ll find out is by downloading it; so go, go now! Go before someone else downloads it all and there&#x2019;s nothing left for you!</p>
<p>As always, we love hearing from you on IRC (#kibana on irc.freenode.net), <a href="https://github.com/elasticsearch/kibana " title="Github" target="_blank">GitHub</a>, or <a href="http://www.twitter.com/elasticsearch">Twitter</a> with issues, suggestions, and contributions.</p></body></html>

Kibana 4 RC1 is Freshly Baked

<html><head></head><body><p>
	Kibana 4 Beta 3 is out! Along with the usual smattering of small fixes come a few knockout headliners. Once again, we offer you the choice to dive right in by grabbing it here: <a href="/downloads/kibana" title="Download Kibana 4 Beta 3">download Kibana 4 Beta 3</a>. However, we suggest you check out the remainder of this post for the feature-by-feature breakdown. Ooo, break it down now! Dance!
</p><h2>Interactive Charts and Dashboards</h2><p>
	Filters are back on the dashboard, and now available in single visualizations too! Bars, points, and pie slices are all clickable and create toggleable filters. We also added some functions to operate on all filters, so you can toggle back and forth between sets with a single click.
</p><p>
	<img src="https://api.contentstack.io/v2/assets/575e4d9b9e7a83165490edf9/download?uid=bltd813198e87d94819?uid=bltd813198e87d94819" style="max-width:100%;">
</p><h2>Scripted Fields</h2><p><em>UPDATE: As a <a href="https://www.elastic.co/blog/elasticsearch-1-4-3-and-1-3-8-released">security</a> precaution, starting with <a href="https://www.elastic.co/blog/kibana-4-rc1-is-now-available">version 4.0.0-RC1</a>, Kibana&#xA0;scripted fields default to&#xA0;<a href="http://lucene.apache.org/core/4_9_0/expressions/index.html?org/apache/lucene/expressions/js/package-summary.html">Lucene Expressions</a>,&#xA0;not Groovy, as the scripting language. Since Lucene Expressions only support operations on numerical fields, the example below dealing with date math&#xA0;does not work in Kibana&#xA0;4.0.0-RC1+&#xA0;versions.</em></p><p>
	Kibana now includes support for Elasticsearch scripting! Not only can you write scripts, you can name them and access them like fields anywhere in the application. Create a scripted field and it becomes part of the documents you view in Kibana as if it was always there. The only catch is that since the script isn&apos;t technically part of the Elasticsearch index, you can not search scripted fields.
</p><p>
	You can, however, use scripts to combine several fields, or perform math on number fields, and then drop the result into a visualization. To help get you started, we&apos;ve added a handy link in the scripted fields screen titled &#x201C;Create a few examples from your date fields.&quot; Find it by heading to the Settings tab&apos;s &#x201C;Index&quot; section. Select or create an index pattern and click the &#x201C;Scripted Fields&quot; tab.
</p><p>
	<img src="https://api.contentstack.io/v2/assets/575e4d9b3dc542cb38c0b142/download?uid=blta446503f05fe2239?uid=blta446503f05fe2239" style="max-width:100%;">
</p><p>
	Once you&apos;ve done that, you&apos;ll find yourself with a few new numeric fields available for use in aggregations. For example, we can look at the 24 hours that make up the day, and get the total hits for all of them across 30 days:
</p><p>
	<img src="https://api.contentstack.io/v2/assets/575e4d9b0342dfd738266099/download?uid=blta74afabd47379399?uid=blta74afabd47379399" style="max-width:100%;">
</p><h2>Highlighting and a New Format for _source</h2><p>
	JSON is great. We all love JSON. Who doesn&apos;t love JSON? XML, that&apos;s who, but that&apos;s beside the point.
</p><p>
	JSON can be a bit of a jumble to look at full time, so we&apos;ve taken to nicely formatting it. The raw JSON for the event is, of course, always available by expanding the record&apos;s row and clicking over to the JSON tab. Oh, and while we were at it, we threw in highlighting, too. Kibana will now automatically highlight matching fields, and even march them to the front of the line:
</p><p>
	<img src="https://api.contentstack.io/v2/assets/575e4d9c0342dfd7382660aa/download?uid=blt99cbacbc0b13a058?uid=blt99cbacbc0b13a058" style="max-width:100%;">
</p><h2>Hit Links</h2><p>
	Maybe you noticed that little <em>&quot;Link to..&quot;</em> in the screenshot above? You might not need to share a visualization or a search, you simply need someone to see just one important hit. Now, it&apos;s easy!
</p><h2>Metric Visualization</h2><p>
	Sometimes you don&apos;t need a chart <strong>or</strong> a document! You just need that <strong>one number</strong>, on a dashboard, right now. And here it is:
</p><p>
	<img src="https://api.contentstack.io/v2/assets/575e4d9b9985d58976379796/download?uid=blt676dd215ef395397?uid=blt676dd215ef395397" style="max-width:100%;">
</p><p>
	Ok, there it is! Enjoy! As always, ping us on <a href="https://github.com/elasticsearch/kibana " title="Github" target="_blank">GitHub</a> with issues, suggestions and contributions. Or, if you love IRC like we do, join us in #kibana on Freenode.
</p></body></html>

kibana-filters.png

Kibana 4 Beta 3: Now More Filtery

Kibana 4 Beta 2 is here! Along with dozens of small tweaks and fixes, there's map support, visualization options, area charts, advanced parameters, and more!

<html><head></head><body><p>
	Eeeeeeeee! It&apos;s here! Kibana 4 Beta 2 is ready to be poked, prodded, and otherwise fiddled with by you, your friends, and your exceptionally intelligent pets. We look forward to your feedback.
</p><p>
	If you just can&apos;t wait to get started, <a href="/downloads/kibana" title="/downloads/kibana">grab Kibana 4 Beta 2 here</a>, otherwise read on for the good stuff.
</p><p>
	Along with dozens of small tweaks and fixes, here are some of the fun new things to look out for in this release of Kibana:
</p><h2>Map Support</h2><p>
	Maps are back and they are more powerful than ever! The new tile map visualization makes use of Elasticsearch&apos;s awesomely powerful <code>geohash_grid</code> to display geographic data, such as visualizing relative response times:
</p><p>
	<img src="https://api.contentstack.io/v2/assets/575e4d9a12798d8e3820033c/download?uid=blt9c1aa62c92bb348e?uid=blt9c1aa62c92bb348e" style="max-width:100%;">
</p><h2>Visualization Options</h2><p>
	In Beta 1, bar charts were always stacked. In Kibana 4 Beta 2, we&apos;ve added options that allow you to modify how visualizations display their data. For example, by grouping bars:
</p><p>
	<img src="https://api.contentstack.io/v2/assets/575e4d9b0342dfd738266086/download?uid=blt31706af8071f9e61?uid=blt31706af8071f9e61" style="max-width:100%;">
</p><p>
	Or displaying bars as percentages:
</p><p>
	<img src="https://api.contentstack.io/v2/assets/575e4d9b3dc542cb38c0b12a/download?uid=blt87d48888a6af3973?uid=blt87d48888a6af3973" style="max-width:100%;">
</p><h2>Area Charts</h2><p>
	Beta 2 brings back area charts, both stacked and unstacked:
</p><p>
	<img src="https://api.contentstack.io/v2/assets/575e4d9b9985d5897637976b/download?uid=blt2b54dad859c69f0a?uid=blt2b54dad859c69f0a" style="max-width:100%;">
</p><h2>Advanced Parameters</h2><p>
	We aim to support as many Elasticsearch features as possible, but sometimes we just haven&apos;t gotten to that one aggregation option you really need right now. For that option, we&apos;ve introduced a JSON input which allows you to specify additional aggregation parameters to send with your request. For example, maybe you want to pass <code>shard_size</code> in a <code>terms</code> agg, or increase the <code>precision_threshold</code> in a cardinality agg. In this case, we pass a script as an advanced parameter, taking the log of the <code>_value</code> of the <code>bytes</code> field and placing it on the X-axis:
</p><p>
	<img src="https://api.contentstack.io/v2/assets/575e4d9b12798d8e3820035a/download?uid=bltc8a358993404ed63?uid=bltc8a358993404ed63" style="max-width:100%;">
</p><h2>Data Tables</h2><p>
	Sometimes you want a flashy chart, and sometimes you just want the numbers. The data table visualization makes that desire a reality:
</p><p>
	<img src="https://api.contentstack.io/v2/assets/575e4d9b58208ba076e2aeae/download?uid=blt25fa82f0a07abbaf?uid=blt25fa82f0a07abbaf" style="max-width:100%;">
</p><h2>Hey! Where Did My Dashboards Go?</h2><p>
	The internal Kibana index changed from <code>kibana-int</code> to <code>.kibana</code>. We recommend you move your documents (e.g., dashboards, settings, visualizations) from the old index to the new one. However you can also simply set <code>kibanaIndex: &quot;kibana-int&quot;</code> in kibana.yml.
</p><h2>What Are We Working on Now?</h2><p>
	Check out our path to Kibana 4 GA on our <a href="https://github.com/elasticsearch/kibana/labels/roadmap" title="https://github.com/elasticsearch/kibana/labels/roadmap" target="_blank">roadmap</a>. As always, we welcome feedback/bugs/fixes on <a href="https://github.com/elasticsearch/kibana/issues" title="https://github.com/elasticsearch/kibana/issues" target="_blank">GitHub</a>
</p></body></html>

Kibana 4 Beta 2: Get It Now

<html><head></head><body><p>The response to Kibana 4 Beta 1 has been amazing! The overwhelmingly positive reactions have been incredible. The whole team is extremely thankful for the bevy of comments and contributions that have been pouring in. We&apos;ve found some particularly pointy needles in the haystack that we decided should be addressed right away, thus we bring you Kibana 4 Beta 1.1 <strong>now</strong>.</p><p><b>Please note:</b> This is <b>beta</b> software. It we do our best to make things great, but this should not be used in production.</p><p><strong>Improvements include:</strong></p><ul>
<li>Cleaner startup behavior when running in a mixed Ruby/jruby environment</li>
<li>Fixes to object saving, loading and editing</li>
<li>The addition of an &#x201C;About&quot; screen with version information</li>
<li>A bunch of mobile view fixes (many thanks to <a href="https://github.com/kkirsche" title="@kkirsche">Kevin Kirsche</a>)</li>
<li>Improved asset caching behavior</li>
</ul><p>You can get Kibana 4 Beta 1.1 <a href="http://www.elasticsearch.org/overview/kibana/installation/" title="Download Kibana 4">HERE</a>. Get it now, enjoy it, and be sure to give us your <a href="https://github.com/elasticsearch/kibana/issues">feedback on GitHub</a>.</p></body></html>

Kibana 4 Beta 1.1: Pointy Needles Blunted

<html><head></head><body><p>We&#x2019;re <del>proud</del> <del>delighted</del> <del>jazzed</del> <del>uncontrollably excited</del> <del>over the top ecstatic</del> pretty darn happy, to share the future of Kibana, and the first beta release of Kibana 4 with you today.</p>

<p><b>Please note:</b> This is <b>beta</b> software. It we do our best to make things great, but this should not be used in production.</p>

<h2>I want it now! Gimmie!</h2>

<p>Get it <a href="/downloads/kibana" title="Download Kibana 4">HERE</a>, see the <a href="https://github.com/elasticsearch/kibana/blob/master/README.md" title="README.md">README.md</a> for the new (easier!) installation procedure. That said, you really should read the rest, there&#x2019;s some great tips down there.</p>
<h2>Welcome to Kibana 4</h2>
<p>We&#x2019;re taking the long road with Kibana 4: You can expect to see several beta releases, each with new features, visualizations and enhancements. We combed over feedback, mailing lists, IRC and the Github issues to compile the features that made it into Beta 1, and we think we hit a lot of the biggies. We&#x2019;re already hard at work on Beta 2 and we&#x2019;re happy to share our roadmap with you, simply checkout the <a href="https://github.com/elasticsearch/kibana/issues?q=is%3Aopen+is%3Aissue+label%3Aroadmap">&#x201C;Roadmap&#x201D;</a> tagged issues in Github. As always, your feedback is crucial in making sure we get it right.</p>
<p>In addition to your feedback we took a step back to consider how people look at data, and further, how they solve real problems. We found that one question will lead to others and those questions will lead to yet more. If you attended Monitorama, or any of a handful of Elasticsearch meet ups, you may have already seen the Kibana 4 proof of concept demo that allowed you to progressively create ever more complex charts. Kibana 4 takes that PoC and expands it to dozens of new features that allow you to compose questions, get answers, and solve problems like never before.</p>
<p>That level of composability can be found throughout Kibana 4 in the way aggregations, searching, visualizations and dashboards fit together. To simplify and streamline composition we&#x2019;ve broken out Kibana 4 into three distinct interfaces, all working together, each adept at answering a unique set of questions.</p>
<h2>A familiar face</h2>
<p>If you&#x2019;re a long term Kibana user you will recognize and feel right at home in the Discover tab.</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4d85d8edd48f7693881d/download?uid=blt61ca09a5fec7c895?uid=blt61ca09a5fec7c895" style="max-width:100%;" alt="Discover"></p>
<p>Discover functions much like a traditional search interface with a list of documents and a timeline of events. Type in a search, hit enter and let Kibana dig through your Elasticsearch index. Speaking of indices, a quick drop down allows you to quickly switch between indices while you search. If you want to switch back, click your browser&#x2019;s back button and you&#x2019;re there. Don&#x2019;t like your new search terms? The old ones are a back button click away, or available in the history of the search field.</p>
<p>And speaking of searches, feel free to type either Lucene Query String syntax or, an oft requested feature, <strong>Elasticsearch JSON queries</strong> into that search box. We know JSON can be tricky to type out, so whether you use Lucene Query Strings, or JSON, we&#x2019;ll validate the syntax for you before shipping it off to Elasticsearch. And that holds true no matter where you type a query in Kibana 4.</p>
<p>Those queries can also be saved for later. Importantly, queries are no longer bound to the dashboard, they can be recalled in Discover, or even tied to a visualization which is later put on a dashboard. Plus, the <strong>query is always passed in the URL</strong>, no matter what screen you&#x2019;re on, so linking to queries is super easy.</p>
<h2>I&#x2019;m here for the charts</h2>
<p>The Visualize tab of Kibana 4 is the culmination of that long-in-the-tooth proof of concept I talked about earlier. Kibana 4 brings the power of Elasticsearch&#x2019;s nested aggregations to the click of a mouse. Maybe I want to know what countries are hitting my site, when they&#x2019;re doing so and whether or not they are authenticated. I can ask that question, and see how the answers relate to each other all within a single request on a single canvas:</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4d850342dfd738265c9f/download?uid=blt09e88cf3c48634b4?uid=blt09e88cf3c48634b4" style="max-width:100%;"></p>
<p>While Kibana 3 could only show time on the histogram panel, and terms on bar chart, Kibana 4 can make use of multiple <strong>Elasticsearch aggregations</strong>. These include both bucket and metric aggregations, including the much anticipated <strong>cardinality</strong> (aka unique count) aggregation, and support for more is on the way. We had to build an entirely new visualization framework to deal with the complexity of aggregations. Right now there are three supported types: Bar charts, line charts and sunburst charts. Fear not! More are on the way! You can expect new visualization with every beta release of Kibana 4.</p>
<p>Sunburst charts are like a multi-level pie chart. In theory they have infinite rings.<br>
<img src="https://api.contentstack.io/v2/assets/575e4d869985d589763793c8/download?uid=blt499fa5b6faf0647e?uid=blt499fa5b6faf0647e" style="max-width:100%;"></p>
<p>Bar charts are now for more than time. Here we show file size ranges broken down by file extension.<br>
<img src="https://api.contentstack.io/v2/assets/575e4d860342dfd738265ca7/download?uid=blt518ae689257080e4?uid=blt518ae689257080e4" style="max-width:100%;"></p>
<p>By now you may have noticed that little gray bar at the bottom of every visualization. Click it to see the data that backs the chart, and, by popular demand,<strong> export it to CSV</strong> for analysis elsewhere. You can also see both the elasticsearch request, and the elasticsearch response here, as well as how long the request took to process.</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4d8658208ba076e2aad6/download?uid=bltf858c63a882160b4?uid=bltf858c63a882160b4" style="max-width:100%;"></p>
<p>Visualizations can be interactively searched, allowing you to modify your query as you build the chart. They can also be tied to a saved query that was created in the Discover tab. This allows you to tie one query to multiple visualizations and update a single query if you need to update the search parameters. For example, if you had several charts that deal with images you may have a query that says
</p><pre>png OR jpg</pre>
<p> saved as &quot;Images&quot;. If you start supporting animated gifs, you need only update your &#x201C;Images&#x201D; and save it for the changes to apply to any chart that is tied to the &#x201C;Images&#x201D; query.</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4d8612798d8e381fff7a/download?uid=bltb5201f8e18a433a4?uid=bltb5201f8e18a433a4" style="max-width:100%;" alt="Extension by file size"></p>
<h2>Show me more charts!</h2>
<p>Of course, you can still create amazing dashboards, but now they&#x2019;re even easier to create and maintain. Gone are the cluttered config dialogs. Any panel added to a dashboard can be created in the Visualize screen, saved, and reused multiple times. Much like one saved query can live on many visualizations, one saved visualization can live on multiple dashboards. If you need to update a visualization you can do it in one place, and your changes will be applied to every dashboard applicable.</p>
<p>Further, while queries and visualizations are bound to a selected index, dashboards are not!<strong> One dashboard can have visualizations from many indices.</strong> That means you can have data from say, your users index, right next to data about your web traffic. Sales data can live next to marketing research and that can live next to the logs from your weather station, all on the same screen!</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4d869e7a83165490ea1d/download?uid=blt72bfe11b697de185?uid=blt72bfe11b697de185" style="max-width:100%;" alt="Awesome dashboard"></p>
<h2>And so much more</h2>
<p>We can&#x2019;t fit it all in a blog post, so go grab the beta and give it a shot: <a href="/downloads/kibana" title="Download Kibana 4">HERE</a>. If you&#x2019;re coming from Kibana 3 we&#x2019;ve put together a short FAQ that we&#x2019;ll be expanding on as needed: <a href="https://github.com/elasticsearch/kibana/blob/master/K3_FAQ.md" title="Download Kibana 4">HERE</a>. As always, we want your feedback, we used it every single day while building Kibana 4 and we&#x2019;ll continue to use it every day as we make Kibana better, faster and easier.</p></body></html>

Kibana 4 Beta 1 Released

<html><head></head><body><p>Kibana 3.1 has been tagged and released! In addition to the usual smattering of bug fixes and small tweaks we have added a few fun features we&#x2019;d love to share with you.</p><h3>Extended statistics</h3><p>The stats panel has been expanded to include all eight statistics Elasticsearch makes available. Of course all can be toggled, and sorted.<img src="https://api.contentstack.io/v2/assets/575e4c7143e9adc538713648/download?uid=bltcfae3f9955ded027?uid=bltcfae3f9955ded027" data-sys-asset-uid="blt9e5357522f46234e"></p><h3>A stats button in the table</h3><p>In addition to the terms button, we&#x2019;ve added a stats button to create an adhoc stats panel. The button is type aware; it only appears for numeric fields.<img src="https://api.contentstack.io/v2/assets/575e4c7143e9adc538713651/download?uid=blte4b79028354085c1?uid=blte4b79028354085c1" data-sys-asset-uid="bltd0c82190e2511d23"></p><h3>Drag it to the dashboard</h3><p>In addition to the new stats button in the table, both the terms and stats panels in the table can be dragged directly onto the dashboard by grabbing their move icon. This means no more going through the menus if all you need is a quick panel, just drag it from the table onto your existing dashboard. After you&#x2019;ve dragged it to the dashboard, grab the right edge of the panel and drag to resize!</p><p><img src="https://api.contentstack.io/v2/assets/575e4c719985d589763765a3/download?uid=bltc20b386af02ee47e?uid=bltc20b386af02ee47e" data-sys-asset-uid="blt2f53c2de5e74209f"></p><h3>Help us out!</h3><p>Have a great idea for a feature? Find a bug and want to fix it? Head over to the <a href="https://github.com/elasticsearch/kibana" title="kibana github project">Kibana github project</a>. Have some really great ideas? And the passion and skills to implement them? We&#x2019;re working on the next generation of Kibana right now, <a href="/about/careers" title="Come work with the Kibana team">come work with us.</a></p></body></html>

Kibana 3.1 is out!

<p>Today is a big day for Elasticsearch and the Kibana team. After 5 milestone releases and over 1000 commits, we’re happy to announce the release of Kibana 3.0.0 GA. Over the last year, Kibana has moved from a simple interface to search logs to a fully featured, interactive analysis and dashboard system for any type of data. Everyday, we’re incredibly inspired by the people who tell us they’ve solved major problems, optimized their existing deployments and found insights in places they never imagined.
</p>
<p><a href="/downloads/kibana">Get it right here</a>.
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4c74d8edd48f76935922/download?uid=bltfed3ba0a1a05b4ba?uid=bltfed3ba0a1a05b4ba" data-sys-asset-uid="bltad8aa4eaa6a65ab9" style="max-width:100%;">
</p>
<h3>Changes since milestone 5</h3>
<p>We’re thrilled to say there have been many bugs fixed since milestone 5, but we’ve introduced no breaking changes! One hundred percent of the focus has been on delivering a stable, consistent experience.
</p>
<h3>What do I need to do to upgrade?</h3>
<p>If you’re coming from milestone 5? Nothing! Simply install and go. If you’re upgrading from milestone 4 your dashboards schema is compatible, but you should know that the <code>derivequeries panel</code> has been deprecated (<a title="see this blog post" href="/blog/whats-cooking-kibana/">See this blog post for more details</a>.) If you’re coming from milestone 4, you may need to clear your browser cache upon upgrading. We have put in place a number of cache busting strategies to limit the need for this in the future.
</p>
<h3>More information</h3>
<p>We’ve written some great tutorials that you can find in the <a title="Kibana Documentation" href="/guide/en/kibana/current/index.html">Kibana Documentation</a> section. If you’re using Kibana for the first time, make sure to read the <a title="ten minute walk through" href="/guide/en/kibana/current/using-kibana-for-the-first-time.html">ten minute walk through</a>.
</p>
<p>Additionally, these pieces of documentation will be useful to getting you up and running:
</p>
<ul>
	<li>The <a href="/guide/en/kibana/current/working-with-queries-and-filters.html">Queries and Filters</a> documentation explains how to use Kibana’s query input, including constructing Apache Lucene queries, adding multiple queries and setting query legend values. This section also covers adding and removing the filters that Kibana adds dynamically when you interact with certain panels.</li>
	<li>The <a href="/guide/en/kibana/current/rows-and-panels.html">Rows and Panels</a> section covers adding new panels and creating custom dashboards from scratch.</li>
	<li>The <a href="/guide/en/kibana/current/saving-and-loading-dashboards.html">Saving and Sharing</a> overview tells you all about how to ‘reuse’ your dashboards and export to other users.</li>
	<li>We’ve also written a complete guide to the <a href="/guide/en/kibana/current/_dashboard_schema.html">Kibana Schema</a>, breaking down every object and property in the JSON document that describes every Kibana dashboard.</li>
	<li>For more advanced features, including building dashboards based on URL parameters and other logic, take a look at the <a href="/guide/en/kibana/current/templated-and-scripted-dashboards.html">Templated and Scripted Dashboards</a> documentation.</li>
</ul>
<h3>Getting Started Videos</h3>
<p>We’ve also created some getting-started videos to guide you through Kibana’s many panel types. These two are the first in a series, so stay tuned to this blog to learn when more are on offer.
</p>
<p>For a deeper dive, you can attend our live Kibana webcast, hosted by yours truly, on April 9th. You can <a href="/webinars/kibana-made-simple/">register now</a> to attend the session, which will include live Q&A following the presentation.
</p>
<div class="video embed-container" style="height: 319.725px;">
	<img style="width: 100%; margin: auto; display: block;" class="vidyard-player-embed" src="https://play.vidyard.com/DViUDjEYLJxZLPBCnKdq4C.jpg" data-uuid="DViUDjEYLJxZLPBCnKdq4C" data-v="4" data-type="inline">
</div>
<p class="blog-img-caption">Introduction to the Kibana Terms Panel
</p>
<div class="video embed-container" style="height: 319.725px;">
	<img style="width: 100%; margin: auto; display: block;" class="vidyard-player-embed" src="https://play.vidyard.com/HcyocLSqFeFswq752JgHtR.jpg" data-uuid="HcyocLSqFeFswq752JgHtR" data-v="4" data-type="inline">
</div>
<p class="blog-img-caption">Using the Kibana Table Panel
</p>
<h3>Let Us Know What You Think</h3>
<p><a href="/downloads/kibana">Download Kibana 3.0.0</a> and check out all of the updates! As always, <a href="https://github.com/elasticsearch/kibana">feedback is welcome and encouraged</a>!
</p>

Kibana 3.0.0 GA is now available!

<html><head></head><body><p>Elasticsearch 1.0 is almost here, and the Kibana team is gearing up for release right alongside. Along with the usual bug fixes and small tweaks, we&apos;ve got some great new features for you in our next release:
</p>
<h3>Panel Groups</h3>
<p>Panels are now organized into groups that happily contain as many panels as you you&#x2019;d like. Rows collapse cleanly and panels consume no resources when hidden.<img src="https://api.contentstack.io/v2/assets/575e4c743dc542cb38c07df2/download?uid=bltcae135b6d3acd2a4?uid=bltcae135b6d3acd2a4" data-sys-asset-uid="blt0c7a0f8addeef408" style="max-width:100%;">
</p>
<h3>Chart Markers</h3>
<p>Correlate deployments, logins and other critical events with changes in traffic, memory consumption or load. Chart markers let you input a custom query to be used to draw your important events inline with a time series chart.
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4c7458208ba076e27c35/download?uid=blte687ab5f50540e8b?uid=blte687ab5f50540e8b" data-sys-asset-uid="bltf7459d6593f180c1" style="max-width:100%;">
</p>
<h3>Ad hoc Filters</h3>
<p>Create your own query filters and save them for later. Filters are stored along with the dashboard and can be toggled on and off to compare the data subsets you define.<img src="https://api.contentstack.io/v2/assets/575e4c749e7a83165490bd10/download?uid=bltc18d8d3a9aa86170?uid=bltc18d8d3a9aa86170" data-sys-asset-uid="blt6211ab59e624ad2a" style="max-width:100%;">
</p>
<h3>Top-N Queries</h3>
<p>Click the colored dot next to a query to do more than set the query color. The new top-N query finds the most popular terms in a field and uses them to compute new queries.<img src="https://api.contentstack.io/v2/assets/575e4c7412798d8e381fd236/download?uid=blt5377e9e2888649d5?uid=blt5377e9e2888649d5" data-sys-asset-uid="blt8729f41326572021" style="max-width:100%;">
</p>
<h3>Stats Panel</h3>
<p>The Stats Panel distills a search down into a single, meaningful number.<img src="https://api.contentstack.io/v2/assets/575e4c743dc542cb38c07dfd/download?uid=bltcc4dbaaad26d1ce9?uid=bltcc4dbaaad26d1ce9" data-sys-asset-uid="blt5328b21167a487e1" style="max-width:100%;">
</p>
<h3>Terms_Stats mode</h3>
<p>Bytes served by country? Revenue per customer? Per-page memory usage? The terms_stats mode of the terms panel has everything you need.
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4c74d8edd48f76935937/download?uid=blt094f09b3de152b70?uid=blt094f09b3de152b70" data-sys-asset-uid="blt7edd85612cf18882" style="max-width:100%;">
</p>
<h3>Coming Soon</h3>
<p>The next release of Kibana will occur in the coming weeks, but you can grab the current version <a href="/downloads/kibana">right here</a>. If you really want to get your hands dirty, pop on over to the <a href="https://github.com/elasticsearch/kibana/">GitHub repository</a>. Feedback is welcome and encouraged, so keep those <a href="https://github.com/elasticsearch/kibana/issues">issues and requests for enhancement</a> coming!
</p></body></html>

What's Cooking in Kibana

<html><head></head><body><p>Kibana 3: Milestone 4 has been released and brings with it a wealth of performance, usability and visualization enhancements. Let&#x2019;s take a look at a few of the significant changes. If you&#x2019;re still on Milestone 3, check out <a href="/blog/this-week-in-kibana/">this post</a> for even more new features.
</p>
<h3>An all new look</h3>
<p>Kibana&#x2019;s panels have been overhauled to feature more prominent labeling, easier to use buttons and links, and an entirely new style. The changes result in improved usability, as well as a space efficient design that allows for great data density and a more consistent UI.
</p>

	<p><img src="https://api.contentstack.io/v2/assets/575e4c9212798d8e381fd758/download?uid=bltf2329ee8e485a2cd?uid=bltf2329ee8e485a2cd" style="max-width:100%;" data-sys-asset-uid="blta0264c9922c4230d"></p><figcaption>Kibana&#x2019;s new look</figcaption>
	<p></p>

<h3>Consistent query and filter placement</h3>
<p>To improve UI harmony, the query and filter panels get their own collapsible, pull-down sections right under the navigation bar. There is no longer a need to place these essential panels yourself, as they&#x2019;re included in every dashboard by default. Like many of Kibana&#x2019;s features, they can be disabled entirely from the dashboard configuration dialog.
</p>
<h3>100% new time range selector</h3>
<p>If you&#x2019;re familiar with Kibana&#x2019;s 2 year history, you might know that there have been several time picker evolutions. The new time picker is a total rewrite that not only uses less space than the old one, but is simpler and easier to use. By moving this important component off the main dashboard, Kibana now has more room to devote to important data and charts. Plus, the new filter format implements Elasticsearch&#x2019;s <a href="/guide/en/elasticsearch/reference/current/mapping-date-format.html#date-math">date math</a> so there&#x2019;s no need to reselect a time frame to move your time window; every search will update the window automatically.
</p>

	<p><img src="https://api.contentstack.io/v2/assets/575e4c929985d58976376b37/download?uid=blt57afbae29307747c?uid=blt57afbae29307747c" style="max-width:100%;" data-sys-asset-uid="blt122f4252003d45e7"></p><figcaption>An all new time picker</figcaption>
	<p></p>

<h3>Filterable field list</h3>
<p>Find fields quickly and easily with the type-to-filter feature of the table.<br>
</p>

	<p><img src="https://api.contentstack.io/v2/assets/575e4c9243e9adc538713bfb/download?uid=blt90886a1ca9622b89?uid=blt90886a1ca9622b89" style="max-width:100%;" data-sys-asset-uid="blt87ca82aa6e55fa35"></p><figcaption>Filterable field lists</figcaption>
	<p></p>

<h3>Ad-hoc facets</h3>
<p>And, once you&#x2019;ve found those field,s analyze them quickly with ad-hoc terms facets. Simply click a field and select a visualization to see the top 10 term matches for that field.
</p>

	<p><img src="https://api.contentstack.io/v2/assets/575e4c93d8edd48f76935e9f/download?uid=bltbce7e633e096dc2a?uid=bltbce7e633e096dc2a" style="max-width:100%;" data-sys-asset-uid="blt3137b9522031f523"></p><figcaption>Exploration is even easier</figcaption>
	<p></p>


	<p><img src="https://api.contentstack.io/v2/assets/575e4c933dc542cb38c0837c/download?uid=blt6508b4c6554970b6?uid=blt6508b4c6554970b6" style="max-width:100%;" data-sys-asset-uid="blt16f9548c747f16db"></p><figcaption>No need to add a panel. Pie chart on the fly!</figcaption>
	<p></p>

<h3>Dynamic dashboards and URL parameters</h3>
<p>Kibana 3: Milestone 4 can now take input via URL parameters! This much anticipated feature comes in two flavors: templated dashboards and scripted dashboards. Kibana 3: Milestone 4 ships with 2 examples designed to work flawlessly with Logstash and gives you a foundation to build your own dashboards with. Templated dashboards are easy to create by simply exporting your dashboard schema to a file, editing it and adding it to your app/dashboards directory. For example, take this section from logstash.json (<a href="https://github.com/elasticsearch/kibana/blob/v3.0.0milestone4/src/app/dashboards/logstash.json">on github</a>)
</p>
<pre><code>  &quot;0&quot;: {
    &quot;query&quot;: &quot;{{ARGS.query || &apos;*&apos;}}&quot;,
    &quot;alias&quot;: &quot;&quot;,
    &quot;color&quot;: &quot;#7EB26D&quot;,
    &quot;id&quot;: 0,
    &quot;pin&quot;: false
  }
</code>
</pre>
<p>Templated dashboards use &#x201C;handlebar syntax&#x201D; to add dynamic section to the JSON based dashboard scheme. Here we&#x2019;ve replaced the contents of the query key with an expression that translates to: <i>Use the query parameter from the URL, if one is not present, use *</i>. Now we could access this dashboard with a URL such as
</p>
<pre><code>http://kibana.example.com/index.html#/dashboard/<strong>file</strong>/logstash.json?query=extension:zip</code>
</pre>
<h4>More complex scripted dashboards</h4>
<p>Scripted dashboards are an even more powerful method of taking URL parameters, using all of the power of JavaScript to compose a complete dashboard object. An example, logstash.js (<a href="https://github.com/elasticsearch/kibana/blob/v3.0.0milestone4/src/app/dashboards/logstash.js">on GitHub</a>) is included in app/dashboards. Because scripted dashboards are entirely JavaScript, we can perform complex operations, like splitting URL parameters. For example, in this URL we are searching for <em>HTML, CSS or PHP</em>, in the <em>last 2 days</em>, and showing <em>request, response and user agent</em> in the table. Note the important change from <em>file</em> to <em>script</em> in the URL:
</p>
<pre><code>http://localhost:8000/index.html#/dashboard/<strong>script</strong>/logstash.js?query=html,css,php&amp;from=2d&amp;fields=request,response,agent</code>
</pre>
<h3>Go get it now</h3>
<p>Milestone 4 is a big step forward for both implementers and users. It is simultaneously more powerful and more simple. And, of course. Kibana continues to integrate seamlessly with Logstash, including the recently released <a href="/guide">Logstash 1.2.2</a>. Kibana can be downloaded directly from elastic.co <a href="/products/kibana">right here</a>.
</p>
<h4>Also, we&#x2019;re hiring</h4>
<p>Do you want to get paid to work on open source? Are you passionate about JavaScript, with a head full of data visualization ideas? We&#x2019;re way more interested in what you know and what you can do than where you live. <a href="/about/careers">Check out our open positions</a>.
</p></body></html>

Kibana 3: Milestone 4

<html><head></head><body><h3>Histogram zero filling</h3>
<p>The histogram panel received a makeover that brought proper light weight zero filling. This means that at intervals where a query should have 0 results, it will properly appear as such, instead of drawing a sloped line to the next point. The zero filling also means that histogram stacked bars will always appear in the same order top to bottom.
</p>
<p>In addition, the stacked tooltip now allows you to choose between cumulative and individual modes.
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4cbdd8edd48f769365ee/download?uid=bltbab2eec0e5378500?uid=bltbab2eec0e5378500" data-sys-asset-uid="blt85bb86ffa1747848" alt="kibana-2013-09-19-histogram-zero-filling.png" style="max-width:100%;">
</p>
<h3>Micro analysis of array fields</h3>
<p>Array fields can now be handled as singles or groups in the micro analysis panel. For example, if I have an array of tags I could see either the 10 most common tags, or the 10 most common ways that tags appear together
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4cbd9985d58976377264/download?uid=bltf33b91d9dd2d56f7?uid=bltf33b91d9dd2d56f7" data-sys-asset-uid="blt23627892f4b4c182" alt="kibana-2013-09-19-micro-analysis-array-fields.png" style="max-width:100%;">
</p>
<h3>_source as the default table field</h3>
<p>If you don&apos;t select any fields for your table, Kibana will now show you the json source of your even by default until you select some fields to show
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4cbd3dc542cb38c08ac8/download?uid=bltb9a5237e0e7bb1ea?uid=bltb9a5237e0e7bb1ea" data-sys-asset-uid="blt2b39b71d6dddb7ae" alt="kibana-2013-09-19-source-as-default-table-field.png" style="max-width: 100%;">
</p>
<h3>Configurable field trimming</h3>
<p>Noticed the &apos;...&apos; at the end of the _source in the above screenshot? Table fields can be trimmed by a configurable &quot;factor&quot;. The factor is essentially the maximum length of a field, divided by the number of columns in the table, after which the field will be trimmed to nicely fit. For example, if my trim factor was 300, and I had 3 columns in the table, fields would be trimmed to a max of 100 character, after which &apos;...&apos; would be added. Of course the entirety of the field is still available in the expanded details view
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4cbd0342dfd73826396a/download?uid=bltd3d33f405d425fbc?uid=bltd3d33f405d425fbc" data-sys-asset-uid="blt7a90a3aa657b4b52" alt="kibana-2013-09-19-configurable-field-trimming.png" style="max-width:100%;">
</p>
<h3>About that details view</h3>
<p>You may know that you can see a table of event fields by click on a table row. Now you have a choice of how you&apos;d like to see the details of an event, including syntax highlighted JSON, as well as the raw unhighlighted JSON.
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4cbd9e7a83165490c945/download?uid=blt3d90153ba40fd812?uid=blt3d90153ba40fd812" data-sys-asset-uid="blt0c6734ff59a29e1d" alt="kibana-2013-09-19-about-that-details-view.png" style="max-width:100%;">
</p>
<h3>Lighter, faster, smaller, better</h3>
<p>Kibana has an all new build system! This new system allows us to build an optimized, minified, awesomulated distribution of Kibana. It also has the benefit of cleanly clearing old caches when you upgrade. Regular builds of Kibana are being published at <a href="http://download.elastic.co/kibana/kibana/kibana-latest.zip">http://download.elastic.co/kibana/kibana/kibana-latest.zip</a> for your convenience. That zipball can be extracted right to your webserver.
</p>
<p>You can still run it right out of the <a href="https://github.com/elasticsearch/kibana">Github repository</a> if you want. However instead of copying the entire repo, you need only upload the src/ directory to your webserver. We recommend grabbing the built version however as its much faster.
</p></body></html>

This Week in Kibana

<html><head></head><body><p>Haven&apos;t upgraded Kibana lately? You might be missing out on some neat stuff! A lot has changed in Kibana and new panels are only half the story. The entire system behind querying has been refactored to provide consistent colors and legends across the entire dashboard. Interfaces have been standardized and many functions have been modified to provide simpler, faster and more powerful functionality. Let&apos;s take a deeper look at some of the recent developments.
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4cbc58208ba076e28864/download?uid=blt65ed181426afe843?uid=blt65ed181426afe843" data-sys-asset-uid="bltd889404e4bb3c6cc" alt="Terms panel- Global colors, aliases and queries - Filters." style="max-width:100%;">
</p><figcaption>Terms panel; Global colors, aliases and queries; Filters.</figcaption>
<h3>New Query Input</h3>
<p>The new query panel replaces the &apos;stringquery&apos; panel as your method for inputting queries. Gone are the individual query inputs for each panel. You can still specify specific queries for specific panels, but you enter them here first, optionally assigning an alias and color, then select them from within the panel editor. Queries can also be pinned to a collapsable section when not being actively modified.
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4cbcd8edd48f769365c2/download?uid=blt10a5eece88d88fcf?uid=blt10a5eece88d88fcf" data-sys-asset-uid="bltc5c907132721138a" alt="kibana-3-new-query-input.png" style="max-width:100%;">
</p>
<h3>Assigning Queries to panels</h3>
<p>Assigning queries to panels has been greatly simplified. Queries can be toggled on/off from the panel editor and even if the underlying query is updated or filtered, the alias will remain consistent. You may also notice that settings windows have been segmented into a tabs to provide a cleaner configuration interface.
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4cbc12798d8e381fde38/download?uid=blt748ffe522802b551?uid=blt748ffe522802b551" data-sys-asset-uid="blt53448049ffbfdc36" alt="kibana-3-assigning-queries-to-panels.png" style="max-width:100%;">
</p>
<h3>Custom colors and aliases</h3>
<p>When you assign a color to a query it is instantly reflected on every panel, and the same goes for aliases, which are used as legend values. This makes it easy to assign color variations in logical groups that make sense for your dashboard and data.
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4cbc0342dfd73826393d/download?uid=blte6604e0c1a7f247a?uid=blte6604e0c1a7f247a" data-sys-asset-uid="blt81c94f97fe76b3d7" alt="kibana-3-custom-colors-aliases.png" style="max-width:100%;"></p>
<h3>Hello Terms!</h3>
<p>A new terms panel has been introduced that represents top field values in 3 unique fashions: pie charts, bar charts and tables. All have click-to-filter functionality that integrates with the new filtering panel.
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4cbc9e7a83165490c91b/download?uid=blt45fc2ed35a5de967?uid=blt45fc2ed35a5de967" data-sys-asset-uid="blt23606880c1f9f9b4" alt="kibana-3-terms.png" style="max-width:100%;">
</p>
<h3>filtering panel?</h3>
<p>Caught that in the last section, did you? Sharp eye! Filters! Filters allow you to drill down into the dataset without modifying your queries. They can also be removed, toggled and edited at will. Filters have 3 modes.
</p>
<ul>
	<li><strong>must</strong>: Records must match this filter</li>
	<li><strong>mustNot</strong>: Records must NOT match this filter</li>
	<li><strong>either</strong>: Records must match one of these filters.</li>
</ul>
<p><img src="https://api.contentstack.io/v2/assets/575e4cbdd8edd48f769365d1/download?uid=bltd9a84883065f26fd?uid=bltd9a84883065f26fd" data-sys-asset-uid="blt10e4937294f848fa" alt="kibana-3-filtering-panel.png" style="max-width:100%;">
</p>
<h3>Fields list and micropanel</h3>
<p>The fields panel has been integrated with the table panel. Field lists are now populated by reading the Elasticsearch <code>/_mapping</code> endpoint. Note that you may need to update your proxy to reflect this change. The field list is now collapsable to save space and new charts have been added to the micropanel.
</p>
<p><img src="https://api.contentstack.io/v2/assets/575e4cbc0342dfd738263949/download?uid=blt002ea47bf23920fa?uid=blt002ea47bf23920fa" data-sys-asset-uid="blt5b8e3b97c769b5ec" alt="kibana-3-fields-list-micropanel.png" style="max-width:100%;">
</p>
<h3>Hey, whats with the color scheme?!</h3>
<p><img src="https://api.contentstack.io/v2/assets/575e4cbd3dc542cb38c08aa9/download?uid=blt4ab23338494353ca?uid=blt4ab23338494353ca" data-sys-asset-uid="blt0a1bb81df8aa7650" alt="kibana-3-screenshot.png" style="max-width:100%;">
</p>
<p>There you go, spotting changes before I can explain! Kibana now allows you to switch between light and dark color schemes to better fit your environment and preferences.
</p>
<p>That about sums it up! Of course Kibana is constantly evolving so be sure to watch this space, <a href="https://github.com/elasticsearch/kibana/" title="star the github repo">star the github repo</a>, and follow <a href="https://twitter.com/rashidkpc/" title="@rashidkpc">@rashidkpc</a> and <a href="https://twitter.com/elasticsearch/" title="@elasticsearch">@elasticsearch</a> on Twitter. Cheers!
</p></body></html>

Kibana: What's Cooking

<html><head></head><body><p>&#xA0;</p>
<p>With growing infrastructure, expanded automation and increasing server:staff ratios, lean operations teams are leading the charge to extract intelligence&#xA0;from logging data. Join us to learn how Elasticsearch fits into an easy to deploy log analysis architecture. We&apos;ll talk about:</p>
<ul>
<li><span style="line-height: 13px">Logging challenges</span></li>
<li>Options for log processing including Logstash, Fluentd, Flume and more</li>
<li>Using Elasticsearch as a log store</li>
<li>Building dashboards for a several example use cases and business needs</li>
<li>Solving operational challenges quickly and easily</li>
</ul>
<p>Rashid Khan will be your host for this&#xA0;live webinar on on Wednesday, June 19th at 9:00am PDT (6pm CET). Rashid is a logging nerd and the author of Kibana, a browser based log and data analysis interface for Elasticsearch</p>
<p><a href="http://www.elasticsearch.org/webinar/using-elasticsearch-for-log-search-and-analysis/">Register for the Webinar</a> </p>
</body></html>

Articles By Rashid Khan

Canvas Technology Preview

Normalizing sparse time series with Timelion

Guarding Kibana from Data Hijacking

I have but one .condition(). Timeseries if-then-else with Timelion

Kibana 4.4.0 is eye meltingly colorful

Kibana 4.2.1 and 4.1.3 released

Timelion: The time series composer for Kibana

Kibana 4.2.0 released

Kibana 4.2 beta 2: The dark side of the moon

产品

公司

Resources

软件即服务 (SaaS)

编排

Articles By Rashid Khan

Canvas Technology Preview

Normalizing sparse time series with Timelion

Guarding Kibana from Data Hijacking

I have but one .condition(). Timeseries if-then-else with Timelion

Kibana 4.4.0 is eye meltingly colorful

Kibana 4.2.1 and 4.1.3 released

Timelion: The time series composer for Kibana

Kibana 4.2.0 released

Kibana 4.2 beta 2: The dark side of the moon