Visualize

Visualize enables you to create visualizations of the data from your Elasticsearch indices, which you can then add to dashboards for analysis.

Kibana visualizations are based on Elasticsearch queries. By using a series of Elasticsearch aggregations to extract and process your data, you can create charts that show you the trends, spikes, and dips you need to know about.

Create visualizations

  1. Open Visualize.
  2. Click Create new visualization.
  3. Choose the visualization type:

    • Basic charts

      Lens

      Quickly build several types of basic visualizations by simply dragging and dropping the data fields you want to display.

    • Most frequently used visualizations

      Line, area, and bar charts

      Compare different series in X/Y charts.

      Pie chart

      Display each source contribution to a total.

      Data table

      Flattens aggregations into table format.

      Metric

      Display a single number.

      Goal and gauge

      Display a number with progress indicators.

      Tag cloud

      Display words in a cloud, where the size of the word corresponds to its importance.

    • Time series optimized

      TSVB

      Visualize time series data using pipeline aggregations.

      Timelion

      Compute and combine data from multiple time series data sets.

    • Maps

      Elastic Maps

      The most powerful way of visualizing map data in Kibana.

      Coordinate map

      Displays points on a map using a geohash aggregation.

      Region map

      Merge any structured map data onto a shape.

      Heat map

      Display shaded cells within a matrix.

    • Dashboard tools

      Controls

      Adds interactive inputs to a Dashboard.

      Markdown widget

      Display free-form information or instructions.

    • For developers

      Vega

      Complete control over query and display.

  4. Specify a search query to retrieve the data for your visualization:

    • To enter new search criteria, select the index pattern for the indices that contain the data you want to visualize. The visualization builder opens with a wildcard query that matches all of the documents in the selected indices.
    • To build a visualization from a saved search, click the name of the saved search you want to use. The visualization builder opens and loads the selected query.

      When you build a visualization from a saved search, any subsequent modifications to the saved search are automatically reflected in the visualization. To disable automatic updates, you can disconnect a visualization from the saved search.

Inspect visualizations

Many visualizations allow you to inspect the query and data behind the visualization.

  1. In the Kibana toolbar, click Inspect.
  2. To download the data, click Download CSV, then choose one of the following options:

    • Formatted CSV - Downloads the data in table format.
    • Raw CSV - Downloads the data as provided.
  3. To view the requests for collecting data, select Requests from the View dropdown.

Save visualizations

To use your visualizations in dashboards, you must save them.

  1. In the Kibana toolbar, click Save.
  2. Enter the visualization Title and optional Description, then Save the visualization.

To access the saved visualization, go to Management > Kibana > Saved Objects.

Read only access

When you have insufficient privileges to save visualizations, the following indicator is displayed and the Save button is not visible.

For more information, refer to Granting access to Kibana.

Example of Visualize’s read only access indicator in Kibana’s header

Share visualizations

When you’ve finished your visualization, you can share it outside of Kibana.

From the Share menu, you can:

  • Embed the code in a web page. Users must have Kibana access to view an embedded visualization.
  • Share a direct link to a Kibana visualization.
  • Generate a PDF report.
  • Generate a PNG report.