IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
Kibana—your window into Elastic »
Elastic Docs

Kibana Guide

From creating beautiful visualizations to managing the Elastic Stack, learn how Kibana helps you get the most of your data.

What's new        Release notes        How-to videos

New to Kibana?

Popular topics

  • What is Kibana?
  • Quick start
  • Add data
  • Create a dashboard
  • Search your data
  • Install Kibana
  • Configure settings
  • Kibana Query Language (KQL)
  • Create a data view
  • Create an alert

Analyze your data

Manage all things Stack

  • Explore your data
  • Create dashboards
  • Create presentations
  • Map geographic data
  • Model, predict, and detect behavior
  • Secure access to Kibana
  • Organize your data in spaces
  • Categorize your saved objects
  • Quickly find apps and objects
  • Manage your data

All topics


  • Kibana Guide: other versions:
  • What is Kibana?
  • What’s new in 8.2
  • Kibana concepts
    • Create a data view
    • Set the time range
    • Kibana Query Language
    • Lucene query syntax
    • Save a query
  • Quick start
  • Set up
    • Install Kibana
      • Install from archive on Linux or macOS
      • Install on Windows
      • Install with Debian package
      • Install with RPM
      • Install with Docker
    • Configure Kibana
      • Alerting and action settings
      • APM settings
      • Banners settings
      • Enterprise Search settings
      • Fleet settings
      • i18n settings
      • Logging settings
      • Logs settings
      • Metrics settings
      • Monitoring settings
      • Reporting settings
      • Search sessions settings
      • Secure settings
      • Security settings
      • Spaces settings
      • Task Manager settings
      • Telemetry settings
      • URL drilldown settings
    • Start and stop Kibana
    • Access Kibana
    • Securing access to Kibana
    • Add data
    • Upgrade Kibana
      • Migrate saved objects
      • Resolve migration failures
      • Roll back to a previous version of Kibana
    • Configure security
      • Authentication
      • Mutual TLS with Elasticsearch
      • Audit logs
      • Access agreement
      • Session management
      • Secure saved objects
    • Configure reporting
    • Configure logging
      • Examples
      • Cli configuration
    • Configure monitoring
      • Collect monitoring data with Metricbeat
      • View monitoring data
      • Legacy collection methods
    • Command line tools
      • kibana-encryption-keys
      • kibana-verification-code
  • Production considerations
    • Security
    • Alerting
    • Reporting
    • Task Manager
      • Health monitoring
      • Troubleshooting
  • Discover
    • Explore your documents
    • Search for relevance
    • Save a search for reuse
    • Run a search session in the background
    • View field statistics
  • Dashboard and visualizations
    • Create your first dashboard
    • Analyze time series data
    • Create panels with editors
      • Lens
      • TSVB
      • Vega
      • Aggregation-based
      • Timelion
    • Make dashboards interactive
      • URL templating
    • Troubleshooting
  • Canvas
    • Edit workpads
    • Present your workpad
    • Tutorial: Create a workpad for monitoring sales
    • Canvas expression lifecycle
      • Expressions always start with a function
      • Function arguments
      • Aliases and unnamed arguments
      • Change your expression, change your output
      • Fetch and manipulate data
      • Compose functions with sub-expressions
      • Handling context and argument types
    • Canvas function reference
      • TinyMath functions
  • Maps
    • Build a map to compare metrics by country or region
    • Track, visualize, and alert on assets in real time
    • Map custom regions with reverse geocoding
    • Heat map layer
    • Tile layer
    • Vector layer
      • Vector styling
      • Vector style properties
      • Vector tooltips
    • Plot big data
      • Clusters
      • Display the most relevant documents per entity
      • Point to point
      • Term join
    • Search geographic data
      • Create filters from a map
      • Filter a single layer
      • Search across multiple indices
    • Configure map settings
    • Connect to Elastic Maps Service
    • Import geospatial data
      • Tutorial: Index GeoJSON data
    • Troubleshoot
  • Reporting and sharing
    • Automatically generate reports
    • Troubleshooting
  • Machine learning
    • Anomaly detection
    • Data frame analytics
  • Graph
    • Configure Graph
    • Troubleshooting and limitations
  • Alerting
    • Set up
    • Create and manage rules
    • Rule types
      • Index threshold
      • Elasticsearch query
      • Tracking containment
    • Troubleshooting and limitations
      • Common Issues
      • Event log index
      • Test connectors
  • Observability
  • APM
    • Set up
    • Get started
      • Services
      • Traces
      • Dependencies
      • Service map
      • Service overview
      • Transactions
      • Trace sample timeline
      • Errors
      • Metrics
    • How-to guides
      • Configure APM agents with central config
      • Control access to APM data
      • Create an alert
      • Create custom links
      • Filter data
      • Find transaction latency and failure correlations
      • Integrate with machine learning
      • Query your data
      • Track deployments with annotations
    • Users and privileges
      • Create an APM reader user
      • Create an annotation user
      • Create a central config user
      • Create an API user
    • Settings
    • REST API
      • Agent Configuration API
      • Annotation API
      • RUM source map API
      • APM agent Key API
    • Troubleshooting
  • Security
  • Dev Tools
    • Run Elasticsearch API requests
    • Profile queries and aggregations
    • Debug grok expressions
    • Debug Painless scripts
  • Fleet
  • Osquery
    • Manage the integration
    • Exported fields reference
    • Prebuilt packs reference
  • Stack Monitoring
    • Beats Metrics
    • Elasticsearch Metrics
    • Kibana alerts
    • Kibana Metrics
    • Logstash Metrics
    • Troubleshooting
  • Stack Management
    • Advanced Settings
    • Cases
      • Configure access to cases
      • Open and manage cases
      • Add connectors
    • Connectors
      • Email
      • IBM Resilient
      • Index
      • Jira
      • Microsoft Teams
      • PagerDuty
      • Server log
      • ServiceNow ITSM
      • ServiceNow SecOps
      • ServiceNow ITOM
      • Swimlane
      • Slack
      • Webhook
      • xMatters
      • Preconfigured connectors
    • License Management
    • Manage data views
    • Numeral Formatting
    • Rollup Jobs
    • Saved Objects
      • Saved Object IDs
    • Security
      • Granting access to Kibana
      • Kibana role management
      • Kibana privileges
      • API Keys
      • Role mappings
    • Spaces
    • Tags
    • Watcher
  • REST API
    • Get features API
    • Kibana spaces APIs
      • Create space
      • Update space
      • Get space
      • Get all spaces
      • Delete space
      • Copy saved objects to space
      • Resolve copy to space conflicts
      • Disable legacy URL aliases
      • Update saved objects spaces
      • Get shareable references
    • Kibana role management APIs
      • Create or update role
      • Get specific role
      • Get all roles
      • Delete role
    • User session management APIs
      • Invalidate user sessions
    • Saved objects APIs
      • Get object
      • Bulk get objects
      • Find objects
      • Create saved objects
      • Bulk create saved objects
      • Update object
      • Bulk update objects
      • Delete object
      • Export objects
      • Import objects
      • Resolve import errors
      • Resolve object
      • Bulk resolve objects
      • Rotate encryption key
    • Data views API
      • Get data view
      • Create data view
      • Update data view
      • Delete data view
      • Get default data view
      • Set default data view
      • Update data view fields metadata
      • Get runtime field
      • Create runtime field
      • Upsert runtime field
      • Update runtime field
      • Delete runtime field
    • Index patterns APIs
      • Get index pattern
      • Create index pattern
      • Update index pattern
      • Delete index pattern
      • Get default index pattern
      • Set default index pattern
      • Update index pattern fields metadata
      • Get runtime field
      • Create runtime field
      • Upsert runtime field
      • Update runtime field
      • Delete runtime field
    • Alerting APIs
      • Create rule
      • Update rule
      • Get rule
      • Delete rule
      • Find rules
      • List rule types
      • Enable rule
      • Disable rule
      • Mute all alerts
      • Mute alert
      • Unmute all alerts
      • Unmute alert
      • Get Alerting framework health
      • Deprecated 7.x APIs
    • Action and connector APIs
      • Create connector
      • Delete connector
      • Get connector
      • Get all connectors
      • List all connector types
      • Update connector
      • Execute connector
      • Deprecated 7.x APIs
    • Cases APIs
      • Add comment
      • Create case
      • Delete cases
      • Delete comments
      • Find cases
      • Find connectors
      • Get alerts
      • Get case activity
      • Get case
      • Get case status
      • Get cases by alert
      • Get comments
      • Get configuration
      • Get reporters
      • Get tags
      • Push case
      • Set configuration
      • Update cases
      • Update comment
      • Update configuration
    • Import and export dashboard APIs
      • Import dashboard
      • Export dashboard
    • Logstash configuration management APIs
      • Delete pipeline
      • List pipeline
      • Create Logstash pipeline
      • Retrieve pipeline
    • Machine learning APIs
      • Sync machine learning saved objects
    • Short URLs APIs
      • Create short URL
      • Get short URL
      • Delete short URL
      • Resolve short URL
    • Get Task Manager health
    • Upgrade assistant APIs
      • Upgrade readiness status
      • Start or resume reindex
      • Batch start or resume reindex
      • Batch reindex queue
      • Add default field
      • Check reindex status
      • Cancel reindex
  • Kibana plugins
  • Troubleshooting
    • Using Kibana server logs
    • Trace Elasticsearch query to the origin in Kibana
  • Accessibility
  • Release notes
    • Kibana 8.2.3
    • Kibana 8.2.2
    • Kibana 8.2.1
    • Kibana 8.2.0
      • Enhancements and bug fixes
  • Developer guide
    • Getting started
      • Running Kibana
      • Installing sample data
      • Debugging Kibana
      • Building a Kibana distributable
      • Plugin Resources
      • Kibana Monorepo Packages
    • Best practices
      • Keep Kibana fast
      • Routing, Navigation and URL
      • Stability
      • Security best practices
      • Typescript
    • Architecture
      • Kibana Plugin API
      • Kibana Core API
      • Application service
      • Configuration service
      • Elasticsearch service
      • HTTP service
      • Logging service
      • Logging configuration changes
      • Saved Objects service
      • UI settings service
      • Patterns
      • Security
      • Add data tutorials
      • Developing Visualizations
      • Reporting integration
    • Contributing
      • How we use Git and GitHub
      • Testing
      • Interpreting CI Failures
      • CI Metrics
      • Documentation during development
      • Submitting a pull request
      • Effective issue reporting in Kibana
      • Pull request review guidelines
      • Linting
    • External plugin development
      • Plugin tooling
      • Functional Tests for Plugins outside the Kibana repo
      • Localization for plugins outside the Kibana repo
      • Testing Kibana Plugins
    • Advanced
      • Daily Elasticsearch Snapshots
      • Running Elasticsearch during development
      • Considerations for basepath
      • Upgrading Node.js
      • Sharing saved objects
      • Legacy URL Aliases
    • List of Kibana plugins
      • Dashboard plugin
      • Embeddables plugin
      • expressions plugin
      • UI Actions
      • Dashboard app enhancements plugin
      • Enhanced embeddables plugin
      • Translations plugin
    • Development Telemetry
Kibana—your window into Elastic »

Most Popular

Video

Get Started with Elasticsearch

Video

Intro to Kibana

Video

ELK for Logs & Metrics