2015-01-23 18:54:40 +01:00
|
|
|
[[setup]]
|
2015-01-23 23:37:26 +01:00
|
|
|
== Getting Kibana Up and Running
|
2015-02-13 19:22:02 +01:00
|
|
|
You can set up Kibana and start exploring your Elasticsearch indices in minutes.
|
2015-01-23 23:37:26 +01:00
|
|
|
All you need is:
|
|
|
|
|
2015-02-18 19:43:40 +01:00
|
|
|
* Elasticsearch 1.4.4 or later
|
2015-04-02 00:22:48 +02:00
|
|
|
* A modern web browser - http://www.elastic.co/subscriptions/matrix#matrix_browsers[Supported Browsers].
|
|
|
|
* Information about your Elasticsearch installation:
|
2015-01-28 23:50:31 +01:00
|
|
|
** URL of the Elasticsearch instance you want to connect to.
|
2015-04-02 00:22:48 +02:00
|
|
|
** Which Elasticsearch indices you want to search.
|
2015-02-17 21:06:32 +01:00
|
|
|
|
2015-05-18 04:31:43 +02:00
|
|
|
NOTE: If your Elasticsearch installation is protected by http://www.elastic.co/overview/shield/[Shield] see
|
2015-05-22 02:50:16 +02:00
|
|
|
{shield}/_shield_with_kibana_4.html[Shield with Kibana 4] for additional setup instructions.
|
2015-01-23 23:37:26 +01:00
|
|
|
|
2015-02-14 20:20:30 +01:00
|
|
|
[float]
|
|
|
|
[[install]]
|
2015-01-23 23:37:26 +01:00
|
|
|
=== Install and Start Kibana
|
2015-05-21 08:13:38 +02:00
|
|
|
|
2015-01-23 23:37:26 +01:00
|
|
|
To get Kibana up and running:
|
|
|
|
|
2015-03-25 03:12:22 +01:00
|
|
|
. Download the https://www.elastic.co/downloads/kibana[Kibana 4 binary package] for your platform.
|
2015-01-23 23:37:26 +01:00
|
|
|
. Extract the `.zip` or `tar.gz` archive file.
|
2015-05-21 08:13:38 +02:00
|
|
|
|
|
|
|
On Unix, you can instead run the package manager suited for your distribution:
|
|
|
|
|
|
|
|
* Red Hat, Centos: `yum install kibana`
|
|
|
|
* Debian: `apt-get install kibana`
|
|
|
|
|
|
|
|
After installing, run Kibana from the install directory: `bin/kibana` (Linux/MacOSX) or `bin\kibana.bat` (Windows).
|
2015-01-23 23:37:26 +01:00
|
|
|
|
2015-04-02 00:22:48 +02:00
|
|
|
That's it! Kibana is now running on port 5601.
|
2015-01-28 23:50:31 +01:00
|
|
|
|
2015-02-14 20:20:30 +01:00
|
|
|
[float]
|
|
|
|
[[connect]]
|
2015-04-02 00:22:48 +02:00
|
|
|
=== Connect Kibana with Elasticsearch
|
2015-05-18 04:31:43 +02:00
|
|
|
Before you can start using Kibana, you need to tell it which Elasticsearch indices you want to explore. The first time
|
|
|
|
you access Kibana, you are prompted to define an _index pattern_ that matches the name of one or more of your indices.
|
|
|
|
That's it. That's all you need to configure to start using Kibana. You can add index patterns at any time from the
|
|
|
|
<<settings-create-pattern,Settings tab>>.
|
2015-01-23 23:37:26 +01:00
|
|
|
|
2015-05-18 04:31:43 +02:00
|
|
|
TIP: By default, Kibana connects to the Elasticsearch instance running on `localhost`. To connect to a different
|
|
|
|
Elasticsearch instance, modify the Elasticsearch URL in the `kibana.yml` configuration file and restart Kibana. For
|
|
|
|
information about using Kibana with your production nodes, see <<production>>.
|
2015-01-23 23:37:26 +01:00
|
|
|
|
2015-02-18 21:24:06 +01:00
|
|
|
To configure the Elasticsearch indices you want to access with Kibana:
|
2015-01-23 23:37:26 +01:00
|
|
|
|
|
|
|
. Point your browser at port 5601 to access the Kibana UI. For example, `localhost:5601` or `http://YOURDOMAIN.com:5601`.
|
2015-02-14 20:20:30 +01:00
|
|
|
+
|
2015-02-18 20:57:25 +01:00
|
|
|
image:images/Start-Page.jpg[Kibana start page]
|
2015-02-14 20:20:30 +01:00
|
|
|
+
|
2015-05-18 04:31:43 +02:00
|
|
|
. Specify an index pattern that matches the name of one or more of your Elasticsearch indices. By default, Kibana
|
|
|
|
guesses that you're working with data being fed into Elasticsearch by Logstash. If that's the case, you can use the
|
|
|
|
default `logstash-*` as your index pattern. The asterisk (*) matches zero or more characters in an index's name. If
|
|
|
|
your Elasticsearch indices follow some other naming convention, enter an appropriate pattern. The "pattern" can also
|
|
|
|
simply be the name of a single index.
|
|
|
|
. Select the index field that contains the timestamp that you want to use to perform time-based comparisons. Kibana
|
|
|
|
reads the index mapping to list all of the fields that contain a timestamp. If your index doesn't have time-based data,
|
|
|
|
disable the *Index contains time-based events* option.
|
|
|
|
. If new indices are generated periodically and have a timestamp appended to the name, select the *Use event times to
|
|
|
|
create index names* option and select the *Index pattern interval*. This improves search performance by enabling Kibana
|
|
|
|
to search only those indices that could contain data in the time range you specify. This is primarily applicable if you
|
|
|
|
are using Logstash to feed data into Elasticsearch.
|
2015-05-22 19:32:15 +02:00
|
|
|
. Click *Create* to add the index pattern. This first pattern is automatically configured as the default.
|
|
|
|
When you have more than one index pattern, you can designate which one to use as the default from *Settings > Indices*.
|
2015-01-23 23:37:26 +01:00
|
|
|
|
2015-05-18 04:31:43 +02:00
|
|
|
Voila! Kibana is now connected to your Elasticsearch data. Kibana displays a read-only list of fields configured for
|
|
|
|
the matching index.
|
2015-01-23 23:37:26 +01:00
|
|
|
|
2015-02-14 20:20:30 +01:00
|
|
|
[float]
|
|
|
|
[[explore]]
|
2015-01-23 23:37:26 +01:00
|
|
|
=== Start Exploring your Data!
|
|
|
|
You're ready to dive in to your data:
|
|
|
|
|
2015-05-18 04:31:43 +02:00
|
|
|
* Search and browse your data interactively from the <<discover, Discover>> page.
|
2015-04-02 00:22:48 +02:00
|
|
|
* Chart and map your data from the <<visualize, Visualize>> page.
|
2015-05-18 04:31:43 +02:00
|
|
|
* Create and view custom dashboards from the <<dashboard, Dashboard>> page.
|
|
|
|
|
2015-05-22 19:32:15 +02:00
|
|
|
For a brief tutorial that explores these core Kibana concepts, take a look at the <<getting-started, Getting
|
|
|
|
Started>> page.
|