1-Getting Started

Download as pdf or txt
Download as pdf or txt
You are on page 1of 55

Data Analysis with Kibana

An Elastic Training Course

elastic.co/training

7.15.0
Welcome to Elastic virtual training
● The training will start with an audio/video test, to make sure that
everyone can hear and see the instructors
● To prevent any audio/video issues, please:
○ use a supported web browser: Chrome or Firefox
○ open this page in an "incognito" or "private" window
○ disable any ad blockers, script blockers, proxy or VPN
● In case of problems, try the following steps in order:
○ click on the video panel in the top right to activate audio
○ refresh this web page
○ try another web browser
○ as a last resort, restarting your computer sometimes helps
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Welcome to Elastic training
● Visit learn.elastic.co and log in
○ follow instructions from registration email to get access
● Go to "My Enrollments" and click on today's training
● Download the PDF file from the "Content" tab
○ this contains all the slides and lab instructions
● Click on "Access your virtual class here" to access the Lab
Environment

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
About Elastic training
● Environment
○ Strigo test: https://app.strigo.io/system-test
● Introductions
● Code of Conduct
○ https://www.elastic.co/community/codeofconduct

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Data Analysis with Kibana: Agenda
● Getting Started
● Search your Data
● Visualize your Data
● Analyze your Data
● Present your Data
● Analyze your Data with Machine Learning
● Advanced Kibana
● Anomaly Hunt

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Getting Started
Module 1
Topics
● Introduction to the Kibana
● Hello, Dashboard!
● Your Space

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Introduction to Kibana
Module 1 Lesson 1
The Elastic Stack
● Reliably and securely
take data from any
source, in any format,
then search, analyze,
and visualize it in real
time.

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Kibana
● Kibana is the window into 3 solutions
Enterprise Observabili Security
the Elastic Stack Elastic Enterprise Search
Search
Elastic Observability
ty
Elastic Security

● UI layer Kibana
Explore, Visualize, Engage
Kibana
○ for visualizing and Powered by
Elasticsearch
Elasticsearch
exploring data in the stack
Store, Search, Analyze

Elasticsearch Beats Logstash


Integrations
○ for managing the Elastic Connect, Collect, Alert

Stack
Deployed
Elastic Cloud Elastic Cloud Elastic Cloud
anywhere Enterprise on Kubernetes

SaaS Orchestration

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Elasticsearch data journey

Data Source Ingest Store Analyze

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Visualize and Analyze
● Data analysis is a core functionality of Kibana

Visualize
Present
Add data Explore

Share

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Where to start
● Start with the home page
● Provides access to the solutions, and everything you need to
visualize and analyze your data

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Add data
● Collect data from an app or service
● Upload a file that contains your data
● Add a sample data set

The slides use The labs use


eCommerce data web log data

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Sample data
● Kibana sample data contains
○ Data set
○ Dashboards
○ Visualizations
○ Canvas workpads
○ Preconfigured ML jobs

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Explore
● Use Discover to search your data for hidden insights and relationships

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Visualize
● Dashboard is your starting point to create visualizations
● Show your data from multiple perspectives

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Present
● Display your data on a visually compelling, pixel-perfect workpad
with Canvas

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Model data behavior
● Extract insights from your data that you might otherwise miss

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Summary:
Introduction to Kibana
Module 1 Lesson 1
Summary
● Elasticsearch, Kibana, Logstash, and Beats are components of the
Elastic Stack
● Kibana can be used to manage the Elastic Stack
● Kibana can be used to add, explore, visualize, present, and share
your data

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Quiz
1. True or False: Kibana can be used to explore data
2. True or False: Kibana can be used to manage Elasticsearch clusters
3. True or False: Data is stored in Kibana

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Introduction to Kibana
Lab 1.1

Load Sample Data


Hello, Dashboard!
Module 1 Lesson 2
Build your first dashboard
● Sample dashboards are a great place to begin
○ Example of how data could be displayed
○ Clone and edit visualizations to make them your own
● When you’re ready, build your own dashboard

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Get to know the interface

Main menu Breadcrumb Search field Help User menu

Query bar Filters Time filter Toolbar

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Dashboard
● Kibana provides several
editors that you can use to
create panels of your data
● Each editor supports
different features and
Elasticsearch aggregations

Click Create Visualization to begin

Opens Lens visualization editor

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Lens interface
Index Pattern Fields List Workspace Layer Pane

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Build your first visualization
● Select the correct Index pattern and Time filter range
● Just drag and drop a field from the fields list to the workspace

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Save to dashboard
● Click Save and return to go back to the dashboard
○ Your new Lens visualization is a new panel on your dashboard

Use Save to Library to save the


visualization to the Visualization Library

The Visualization Library can be used like


a library for visualization templates

Reusing visualizations in other


dashboards is simple and will not require
the Visualization Library
Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Add more panels
● Click Create visualization to return to Lens
● Explore different visualization types Chart type

Kibana Kibana also


guessed that guessed that
you might want you might want
to see to see the
Bar vertical count of the
stacked for the top values of
category field category

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Change chart type
● Choose from many chart types

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
And more panels
● Use other editors for different types of panels
○ You can find legacy editors under All types → Aggregation based

Markdown Maps All available editors

Lens

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Add a description
● Use the Text editor to add text to your dashboard

Click Help
for more info

Kibana’s Text editor uses a


GitHub-flavored markdown syntax

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Rearrange your dashboard
● Panels can be moved and resized
● Panel titles can be added or removed

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Save your dashboard
● Save your dashboard
○ Switch to view mode will become
available
○ Click Edit to return to edit mode

Enable Store time with dashboard


to set a default time range
for your dashboard

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Summary:
Hello, Dashboard!
Module 1 Lesson 2
Summary
● Go to Dashboard to begin building visualizations
● Use Lens to build visualizations easily
○ Select from many chart types
● Use the Text editor to add text to your dashboard
● Rearrange the panels on your dashboard in edit mode

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Quiz
1. True or False: Dashboards are used to collect and display
visualizations
2. What is the name of the recommended editor to build visualizations
for your dashboard?
3. In what ways can you use the Text editor on your dashboard?

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Hello, Dashboard!
Lab 1.2

Create your first dashboard


Your Space
Module 1 Lesson 3
Organize your work in spaces
● Spaces enable you to organize your dashboards and other saved
objects into meaningful categories

You can even define the


home page of your space

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Organize your work in spaces
● Kibana creates a default space for you
○ It’s called Default

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Create a space
● Go to the Space Manager from
○ Spaces menu -> Manage spaces
○ Main menu -> Stack Management -> Spaces

Create a new space


called Nova

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Edit your space
● Select which Kibana features can be accessed in your new space

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Select your space
● Once a new space is created, you will be asked to select a space
when you log in to Kibana
You can also switch
spaces from the
Spaces menu

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Where’s my dashboard!?
● Your new space will be empty!
○ Your dashboard and all the sample objects are stored in the
Default space
● If you go to Dashboard you will be asked to create an Index Pattern

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Index Pattern
● Your data set is still accessible from your space
○ But all the Kibana objects stored to access that data exists only
in the Default space
● Kibana requires an index pattern to access the Elasticsearch data
that you want to explore
○ An index pattern can point to one or more indices, data stream,
or index aliases
○ For example, an index pattern can point to your log data from
yesterday, or all indices that contain your data

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Index Pattern
● You can create a new index pattern
○ Or copy over an existing index pattern from another space

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Copy to space
● Kibana knows which objects have relationships to other objects
○ For example, the Hello, Dashboard! dashboard uses the
kibana_sample_data_ecommerce index pattern
● Use copy to space to copy all related objects to a space

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Check out your new space
Avatar for
your Space
Kibana objects created in the
Nova space will not appear in
the Default space

The Saved Objects page in


the Nova space will now look
very different from
the Saved Objects page in
the Default space

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Summary:
Your Space
Module 1 Lesson 3
Summary
● Spaces can be used to organize dashboards, visualizations and
other Kibana objects
● You can easily copy Kibana objects from one space to another from
Saved Objects

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Quiz
1. True or False: Kibana creates a default space called “Default”
2. How can you separate the workspace for users who are working with
the same dataset?
3. How do you share dashboards between spaces?

Copyright Elasticsearch BV 2015-2022 Copying, publishing and/or distributing without written permission is strictly prohibited
Your Space
Lab 1.3

Create a new space “Nova”


Copy over your dashboard to Nova

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy