Visualizeedit

Visualize enables you to create visualizations of the data from your Elasticsearch indices, which you can then add to dashboards for analysis.

Kibana visualizations are based on Elasticsearch queries. By using a series of Elasticsearch aggregations to extract and process your data, you can create charts that show you the trends, spikes, and dips you need to know about.

Create visualizationsedit

  1. Open Visualize.
  2. Click Create new visualization.
  3. Choose the visualization type:

    • Basic charts

      Lens
      Quickly build several types of basic visualizations by simply dragging and dropping the data fields you want to display.
    • Most frequently used visualizations

      Line, area, and bar charts

      Compare different series in X/Y charts.

      Pie chart

      Display each source contribution to a total.

      Data table

      Flattens aggregations into table format.

      Metric

      Display a single number.

      Goal and gauge

      Display a number with progress indicators.

      Heat maps

      Display shaded cells within a matrix.

      Tag cloud

      Display words in a cloud, where the size of the word corresponds to its importance.

    • Time series optimized

      TSVB

      Visualize time series data using pipeline aggregations.

      Timelion

      Compute and combine data from multiple time series data sets.

    • Maps

      Elastic maps

      The most powerful way of visualizing map data in Kibana.

      Coordinate map

      Displays points on a map using a geohash aggregation.

      Region map

      Merge any structured map data onto a shape.

    • For use in dashboards

      Controls

      Provides the ability to add interactive inputs to a Dashboard.

      Markdown widget

      Display free-form information or instructions.

    • For developers

      Vega

      Complete control over query and display.

  4. Specify a search query to retrieve the data for your visualization:

    • To enter new search criteria, select the index pattern for the indices that contain the data you want to visualize. This opens the visualization builder with a wildcard query that matches all of the documents in the selected indices.
    • To build a visualization from a saved search, click the name of the saved search you want to use. This opens the visualization builder and loads the selected query.

      When you build a visualization from a saved search, any subsequent modifications to the saved search are automatically reflected in the visualization. To disable automatic updates, you can disconnect a visualization from the saved search.