Search your dataedit

You can search your data in any app that has a query bar, or by clicking on elements in a visualization. A search matches indices in the current index pattern and in the current time frame.

Search with KQLedit

By default, you search using Kibana’s standard query language (KQL), which features autocomplete and a simple, easy-to-use syntax. If you prefer to use Kibana’s legacy query language, based on the Lucene query syntax, you can switch to it from the KQL popup in the query bar. When you enable the legacy query language, you can use the full JSON-based Elasticsearch Query DSL.

Refresh search resultsedit

As more documents are added to the indices you’re searching, the search results get stale. Using the time filter, you can configure a refresh interval to periodically resubmit your searches to retrieve the latest results.

Refresh interval option in time filter. The configurable time interval is located in the dropdown.

You can also manually refresh the search results by clicking the Refresh button.