2016-10-25 03:41:32 +02:00
|
|
|
[[tutorial-discovering]]
|
2019-07-25 22:46:23 +02:00
|
|
|
=== Discover your data
|
2016-10-25 03:41:32 +02:00
|
|
|
|
2020-03-11 14:53:20 +01:00
|
|
|
Using *Discover*, enter
|
2018-05-14 22:54:23 +02:00
|
|
|
an {ref}/query-dsl-query-string-query.html#query-string-syntax[Elasticsearch
|
|
|
|
query] to search your data and filter the results.
|
|
|
|
|
2020-06-12 16:39:36 +02:00
|
|
|
. Open the menu, then go to *Discover*.
|
2018-08-16 14:52:38 +02:00
|
|
|
+
|
2020-03-11 14:53:20 +01:00
|
|
|
The `shakes*` index pattern appears.
|
2018-08-16 14:52:38 +02:00
|
|
|
|
2020-06-12 16:39:36 +02:00
|
|
|
. To make `ba*` the index, click the *Change Index Pattern* dropdown, then select `ba*`.
|
2019-07-25 22:46:23 +02:00
|
|
|
+
|
2020-03-10 16:51:53 +01:00
|
|
|
By default, all fields are shown for each matching document.
|
2019-07-25 22:46:23 +02:00
|
|
|
|
2020-06-12 16:39:36 +02:00
|
|
|
. In the *Search* field, enter the following:
|
2018-05-14 22:54:23 +02:00
|
|
|
+
|
2016-10-25 03:41:32 +02:00
|
|
|
[source,text]
|
2019-04-03 20:53:43 +02:00
|
|
|
account_number<100 AND balance>47500
|
2019-07-25 22:46:23 +02:00
|
|
|
+
|
2018-05-14 22:54:23 +02:00
|
|
|
The search returns all account numbers between zero and 99 with balances in
|
2019-07-25 22:46:23 +02:00
|
|
|
excess of 47,500. Results appear for account numbers 8, 32, 78, 85, and 97.
|
|
|
|
+
|
2018-05-14 22:54:23 +02:00
|
|
|
[role="screenshot"]
|
2016-10-25 03:41:32 +02:00
|
|
|
image::images/tutorial-discover-2.png[]
|
2019-07-25 22:46:23 +02:00
|
|
|
+
|
2020-03-11 14:53:20 +01:00
|
|
|
. Hover over the list of *Available fields*, then
|
2020-06-12 16:39:36 +02:00
|
|
|
click *Add* next to each field you want include in the table.
|
2019-07-25 22:46:23 +02:00
|
|
|
+
|
2020-03-11 14:53:20 +01:00
|
|
|
For example, when you add the `account_number` field, the display changes to a list of five
|
2018-05-14 22:54:23 +02:00
|
|
|
account numbers.
|
2019-07-25 22:46:23 +02:00
|
|
|
+
|
2018-05-14 22:54:23 +02:00
|
|
|
[role="screenshot"]
|
2016-10-25 03:41:32 +02:00
|
|
|
image::images/tutorial-discover-3.png[]
|