mirror of
https://github.com/elastic/kibana.git
synced 2025-04-24 17:59:23 -04:00
* [DOCS] Dashboard-first refresh * Fixes broken links and partinto error * Fixes images in panel table * Fixes broken links * Fixes broken drilldowns link * Fixes images and table * Removed un needed files and added edit content * Update docs/getting-started/tutorial-visualizing.asciidoc Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com> * Review comments * Review comments * Removed blocks * Typo fix * Update docs/getting-started/tutorial-sample-data.asciidoc Co-authored-by: Wylie Conlon <wylieconlon@gmail.com> * Update docs/getting-started/tutorial-discovering.asciidoc Co-authored-by: Wylie Conlon <wylieconlon@gmail.com> * Update docs/getting-started/tutorial-sample-data.asciidoc Co-authored-by: Wylie Conlon <wylieconlon@gmail.com> * Update docs/getting-started/tutorial-visualizing.asciidoc Co-authored-by: Wylie Conlon <wylieconlon@gmail.com> * Update docs/user/dashboard/edit-dashboards.asciidoc Co-authored-by: Wylie Conlon <wylieconlon@gmail.com> * Update docs/user/dashboard/dashboard.asciidoc Co-authored-by: Wylie Conlon <wylieconlon@gmail.com> * Update docs/user/dashboard/dashboard.asciidoc Co-authored-by: Wylie Conlon <wylieconlon@gmail.com> * Update docs/user/dashboard/aggregation-reference.asciidoc Co-authored-by: Wylie Conlon <wylieconlon@gmail.com> * Review comments Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com> Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
35 lines
1.2 KiB
Text
35 lines
1.2 KiB
Text
[[explore-your-data]]
|
|
=== Explore your data
|
|
|
|
With *Discover*, you use {ref}/query-dsl-query-string-query.html#query-string-syntax[Elasticsearch
|
|
queries] to explore your data and narrow the results with filters.
|
|
|
|
. Open the menu, then go to *Discover*.
|
|
+
|
|
The `shakes*` index pattern appears.
|
|
|
|
. To make `ba*` the index, click the *Change Index Pattern* dropdown, then select `ba*`.
|
|
+
|
|
By default, all fields are shown for each matching document.
|
|
|
|
. In the *Search* field, enter the following, then click *Update*:
|
|
+
|
|
[source,text]
|
|
account_number<100 AND balance>47500
|
|
+
|
|
The search returns all account numbers between zero and 99 with balances in
|
|
excess of 47,500. Results appear for account numbers 8, 32, 78, 85, and 97.
|
|
+
|
|
[role="screenshot"]
|
|
image::images/tutorial-discover-2.png[]
|
|
+
|
|
. Hover over the list of *Available fields*, then
|
|
click *Add* next to each field you want include in the table.
|
|
+
|
|
For example, when you add the `account_number` field, the display changes to a list of five
|
|
account numbers.
|
|
+
|
|
[role="screenshot"]
|
|
image::images/tutorial-discover-3.png[]
|
|
|
|
Now that you know what your documents contain, it's time to gain insight into your data with visualizations.
|