Kibana: let’s explore data

Kibana, ELK Stack's data visualization tool, offers several methodologies to graphically represent and explore data. Thanks to some example data, you can better understand the potential of this tool. In this tutorial we will discover some of them.


Reading time: 4 minutes

Kibana is the data visualization tool of ELK stack. As seen in article What is Kibana used for?, there are several functionalities available. In addition to visualization, it is possible, for example, to use machine learning models to identify anomalies in the data and to set up custom alerting systems. The management of users, their roles and workspaces can be done through simple and intuitive interfaces. Even integration with external systems for logs capture and analysis is driven by graphical interfaces.

Kibana, however, was born as a tool to visualize the data saved within Elasticsearch. The potentialities of representation are really a lot. To discover them we will illustrate in this tutorial how to add test data and analyze it with the main tools.

Import sample data

Sample data is provided along with examples of visualizations, dashboards, and more to help you explore the functionality of Kibana before importing your own data.

  1. In the home page, click on “Try our sample data”.
  2. On the Sample eCommerce orders tab, click Add data

Explore data

The Discover page displays the data in an interactive histogram showing the distribution of the data, or documents, over time, and a table listing the fields for each document that matches the index template. To view a subset of the documents, you can apply filters to the data and customize the table in order to display only the fields of interest.

  1. Open the main menu, then click on Discover
  2. Change time filter to Last 7 days
  1. To view sales orders for women’s clothing that have a cost greater than or equal to $60, use the KQL search field:
products.taxless_price >= 60 and category : Women's Clothing 
  1. To view only product categories that contain sales orders, move your mouse over the category field and then click on +

View and analyze data

A dashboard is a set of panels for viewing and analyzing data. Panels contain visualizations, interactive controls, text, and more.

  1. Open the main menu, then click Dashboard
  2. Click on [eCommerce] Revenue Dashboard

Create a view panel

Create a treemap panel that shows the top sales regions and manufacturers, then add the panel to your dashboard.

  1. In the toolbar click
  2. In the dashboard click
  3. In the drag-and-drop visualization editor, open the Visualization type drop-down menu, then select Treemap.
Schermata 2021-12-14 alle 14.52.29
  1. From the Available fields list, drag the following fields into the workspace:
    • geoip.city_name
    • manufacturer.keyword
  1. Click . The treemap appears as the last display panel on the dashboard.

Interact with data

You can interact with dashboard data using controls that allow you to apply filters at the dashboard level. Interact with the [eCommerce] Controls panel to view women’s clothing data from manufacturer Gnomehouse.

  1. From the Manufacturer drop-down menu, select Gnomehouse
  2. From the Category drop-down menu, select Women’s Clothing
  3. Click Apply changes

Filter data

To view a subset of the data, you can apply filters to the dashboard panels. Apply a filter to view women’s clothing data generated on Wednesday by the producer Gnomehouse.

  1. Click Add filter
  2. From the Field drop-down menu, select day_of_week
  3. From the Operator drop-down menu, select is
  4. From the Value drop-down menu, select Wednesday
  1. Click Save

Recommended Readings

More To Explore


SQL: correlation

In the SQL language, it is possible to condition the execution of a query on the values of the tuples being parsed. This behavior is defined by correlation, that is, conditions in the WHERE clause of a nested query that relate to attributes of the tables in the outer query. Through some examples we will discover which operators use this construct, how to appropriately define correlations, and its alternatives.


SQL: Common Table Expression

Expressing complex queries in SQL language can be really difficult. Dividing the problem into mini-queries is the best strategy to get the desired results quickly without running into errors. Common Table Expressions, also called CTEs, allow the queries of our interest to be defined once to be reused multiple times when needed. Their clean syntax increases the readability of SQL scripts, allows us to debug written code and to create very complex logic to filter and extract data. Through some examples we will discover their potential.

Leave a Reply

Your email address will not be published. Required fields are marked *

Design with MongoDB

Design with MongoDB!!!

Buy the new book that will help you to use MongoDB correctly for your applications. Available now on Amazon!