1-Getting Started
1-Getting Started
1-Getting Started
elastic.co/training
7.15.0
Welcome to Elastic virtual training
● The training will start with an audio/video test, to make sure that
everyone can hear and see the instructors
● To prevent any audio/video issues, please:
○ use a supported web browser: Chrome or Firefox
○ open this page in an "incognito" or "private" window
○ disable any ad blockers, script blockers, proxy or VPN
● In case of problems, try the following steps in order:
○ click on the video panel in the top right to activate audio
○ refresh this web page
○ try another web browser
○ as a last resort, restarting your computer sometimes helps
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Welcome to Elastic training
● Visit learn.elastic.co and log in
○ follow instructions from registration email to get access
● Go to "My Enrollments" and click on today's training
● Download the PDF file from the "Content" tab
○ this contains all the slides and lab instructions
● Click on "Access your virtual class here" to access the Lab
Environment
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
About Elastic training
● Environment
○ Strigo test: https://app.strigo.io/system-test
● Introductions
● Code of Conduct
○ https://www.elastic.co/community/codeofconduct
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Data Analysis with Kibana: Agenda
● Getting Started
● Search your Data
● Visualize your Data
● Analyze your Data
● Present your Data
● Analyze your Data with Machine Learning
● Advanced Kibana
● Anomaly Hunt
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Getting Started
Module 1
Topics
● Introduction to the Kibana
● Hello, Dashboard!
● Your Space
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Introduction to Kibana
Module 1 Lesson 1
The Elastic Stack
● Reliably and securely
take data from any
source, in any format,
then search, analyze,
and visualize it in real
time.
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Kibana
● Kibana is the window into 3 solutions
Enterprise Observabili Security
the Elastic Stack Elastic Enterprise Search
Search
Elastic Observability
ty
Elastic Security
● UI layer Kibana
Explore, Visualize, Engage
Kibana
○ for visualizing and Powered by
Elasticsearch
Elasticsearch
exploring data in the stack
Store, Search, Analyze
Stack
Deployed
Elastic Cloud Elastic Cloud Elastic Cloud
anywhere Enterprise on Kubernetes
SaaS Orchestration
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Elasticsearch data journey
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Visualize and Analyze
● Data analysis is a core functionality of Kibana
Visualize
Present
Add data Explore
Share
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Where to start
● Start with the home page
● Provides access to the solutions, and everything you need to
visualize and analyze your data
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Add data
● Collect data from an app or service
● Upload a file that contains your data
● Add a sample data set
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Sample data
● Kibana sample data contains
○ Data set
○ Dashboards
○ Visualizations
○ Canvas workpads
○ Preconfigured ML jobs
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Explore
● Use Discover to search your data for hidden insights and relationships
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Visualize
● Dashboard is your starting point to create visualizations
● Show your data from multiple perspectives
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Present
● Display your data on a visually compelling, pixel-perfect workpad
with Canvas
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Model data behavior
● Extract insights from your data that you might otherwise miss
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Summary:
Introduction to Kibana
Module 1 Lesson 1
Summary
● Elasticsearch, Kibana, Logstash, and Beats are components of the
Elastic Stack
● Kibana can be used to manage the Elastic Stack
● Kibana can be used to add, explore, visualize, present, and share
your data
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Quiz
1. True or False: Kibana can be used to explore data
2. True or False: Kibana can be used to manage Elasticsearch clusters
3. True or False: Data is stored in Kibana
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Introduction to Kibana
Lab 1.1
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Get to know the interface
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Dashboard
● Kibana provides several
editors that you can use to
create panels of your data
● Each editor supports
different features and
Elasticsearch aggregations
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Lens interface
Index Pattern Fields List Workspace Layer Pane
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Build your first visualization
● Select the correct Index pattern and Time filter range
● Just drag and drop a field from the fields list to the workspace
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Save to dashboard
● Click Save and return to go back to the dashboard
○ Your new Lens visualization is a new panel on your dashboard
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Change chart type
● Choose from many chart types
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
And more panels
● Use other editors for different types of panels
○ You can find legacy editors under All types → Aggregation based
Lens
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Add a description
● Use the Text editor to add text to your dashboard
Click Help
for more info
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Rearrange your dashboard
● Panels can be moved and resized
● Panel titles can be added or removed
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Save your dashboard
● Save your dashboard
○ Switch to view mode will become
available
○ Click Edit to return to edit mode
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Summary:
Hello, Dashboard!
Module 1 Lesson 2
Summary
● Go to Dashboard to begin building visualizations
● Use Lens to build visualizations easily
○ Select from many chart types
● Use the Text editor to add text to your dashboard
● Rearrange the panels on your dashboard in edit mode
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Quiz
1. True or False: Dashboards are used to collect and display
visualizations
2. What is the name of the recommended editor to build visualizations
for your dashboard?
3. In what ways can you use the Text editor on your dashboard?
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Hello, Dashboard!
Lab 1.2
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Organize your work in spaces
● Kibana creates a default space for you
○ It’s called Default
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Create a space
● Go to the Space Manager from
○ Spaces menu -> Manage spaces
○ Main menu -> Stack Management -> Spaces
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Edit your space
● Select which Kibana features can be accessed in your new space
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Select your space
● Once a new space is created, you will be asked to select a space
when you log in to Kibana
You can also switch
spaces from the
Spaces menu
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Where’s my dashboard!?
● Your new space will be empty!
○ Your dashboard and all the sample objects are stored in the
Default space
● If you go to Dashboard you will be asked to create an Index Pattern
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Index Pattern
● Your data set is still accessible from your space
○ But all the Kibana objects stored to access that data exists only
in the Default space
● Kibana requires an index pattern to access the Elasticsearch data
that you want to explore
○ An index pattern can point to one or more indices, data stream,
or index aliases
○ For example, an index pattern can point to your log data from
yesterday, or all indices that contain your data
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Index Pattern
● You can create a new index pattern
○ Or copy over an existing index pattern from another space
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Copy to space
● Kibana knows which objects have relationships to other objects
○ For example, the Hello, Dashboard! dashboard uses the
kibana_sample_data_ecommerce index pattern
● Use copy to space to copy all related objects to a space
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Check out your new space
Avatar for
your Space
Kibana objects created in the
Nova space will not appear in
the Default space
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Summary:
Your Space
Module 1 Lesson 3
Summary
● Spaces can be used to organize dashboards, visualizations and
other Kibana objects
● You can easily copy Kibana objects from one space to another from
Saved Objects
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Quiz
1. True or False: Kibana creates a default space called “Default”
2. How can you separate the workspace for users who are working with
the same dataset?
3. How do you share dashboards between spaces?
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Your Space
Lab 1.3