Commit graph

56 commits

Author SHA1 Message Date
gchaps e6e36102f0
[DOCS] Reorganizes concepts and discover sections (#97019)
* [DOCS] Reorganizes concepts and discover sections

* [DOCS] Updates time filter and saved query sections

* Update docs/discover/save-search.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* [DOCS] Updates time filter and saved query doc

* [DOCS] Updates images

* [DOCS] Adds missing images

* [DOCS] Minor edits

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
2021-04-21 11:02:00 -07:00
Kaarina Tungseth 1aa6a140dd
Ui changes (#95989) 2021-04-01 09:09:11 -05:00
gchaps ea8efd5ebe
[DOCS] Adds docs for search sessions (#94661)
* [DOCS] Adds docs for search sessions

* [DOCS] Improves intro and title for search sessions doc

* [DOCS] Fixes bulleted list

* [DOCS] Makes doc title more descriptive

* [DOCS] Incorporates review comments

* [DOCS] Includes a better explanation of restore action

* [DOCS] Changed titled and fixed setting names

* [DOCS] Verified content about maps and restored session

* [DOCS] Fixes setting names

* [DOCS] Changes order of last two steps

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2021-03-22 09:35:08 -07:00
Matthias Wilhelm 88f41565b0
[Discover][Doc] Improve main documentation (#91854)
Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2021-03-04 19:09:43 +01:00
Matthias Wilhelm 51b416b23f
[Discover] Restore context documentation (#90784)
Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2021-03-04 17:24:13 +01:00
Matthias Wilhelm 3894ecf862
[Discover][docs] Add search for relevance (#90611)
Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
Co-authored-by: Lisa Cawley <lcawley@elastic.co>
2021-02-25 21:45:14 +01:00
Wylie Conlon d4f3420b41
[Docs] Clarify KQL and Lucene docs (#91065)
* [Docs] Clarify KQL and Lucene docs

* Code review suggestions
2021-02-16 13:06:25 -05:00
gchaps b181f05141
[DOCS] Adds examples of date range queries (#88201)
* [DOCS] Adds examples of date range queries

* Update docs/discover/kuery.asciidoc

Co-authored-by: Nicholas Bellerophon <github@nerophon.com>

Co-authored-by: Nicholas Bellerophon <github@nerophon.com>
2021-01-13 08:54:21 -08:00
gchaps 3b6453adcd
[DOCS] Updates images in Discover docs (#87940) 2021-01-12 13:59:30 -08:00
Alex Close f22e06e618
Add timestamp range example to kql docs (#87138)
A few folks have asked me if it is possible to do timestamp ranges by using "now" in kql. This was missing from an example so I have added it to the docs.

(cherry picked from commit 48df620b1d30a9dcd08423204b66b453e50e587b)
2021-01-05 09:26:28 +00:00
gchaps a2d13f6211
[DOCS] Fixes typo in saved search doc (#86808) 2020-12-22 10:08:50 -08:00
gchaps d31ee21a86
[DOCS] Fixes typo in KQL doc (#83860) 2020-11-20 10:32:09 -08:00
Kaarina Tungseth 57b7702314
[DOCS] Reallocates limitations to point-of-use (#79582)
* [DOCS] Reallocates limitations to point-of-use

* KQL changes

* Removed limitations file

* Review comments
2020-11-19 10:49:27 -06:00
gchaps 0e565bfd52
[DOCS] Updates Discover docs (#82773)
* [DOCS] Updates Discover docs

* Update docs/user/discover.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/user/discover.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/user/discover.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/user/discover.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/user/discover.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/user/discover.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/user/discover.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/user/discover.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/user/discover.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* [DOCS] Incorporates review comments

* [DOCS] More changes based on edits

* [DOCS] Edits per lastest review

* [DOCS] Added redirects

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
2020-11-12 09:43:45 -08:00
Kaarina Tungseth c77619352b
[DOCS] 7.10 Core UI changes (#80407)
* [DOCS] 7.10 screenCore UI changes

* Kibana access options

* Removed Kibana from Set up Kibana

* Removed rogue symbols

* Update docs/spaces/index.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Update docs/management/managing-beats.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Review comments

* Update docs/user/introduction.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Review comments

* Changed menu to main menu

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2020-10-22 09:06:51 -05:00
gchaps 32e54bbbdd
[DOCS] Fixes errors in KQL examples (#81223) 2020-10-21 08:41:22 -07:00
gchaps 823ccb82ea
[DOCS] Updates KQL doc (#77817)
* [DOCS] Updates KQL doc

* [DOCS] Edits to KQL doc

* Update docs/discover/kuery.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/discover/kuery.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/discover/kuery.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/discover/kuery.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/discover/kuery.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/discover/kuery.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/discover/kuery.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/discover/kuery.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/discover/kuery.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/discover/kuery.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/discover/kuery.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/discover/kuery.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/discover/kuery.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/discover/kuery.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Apply suggestions from code review

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* [DOCS] Adds image of autocomplete and other edits

* [DOCS] Minor edit to KQL doc

* [DOCS] Minor edit

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
2020-09-29 10:57:30 -07:00
ncheckin 37d49b0052
updated discover with alt text (#77660)
* Update context.asciidoc

* Update document-data.asciidoc

* Update field-filter.asciidoc

* Update search.asciidoc

* Update set-time-filter.asciidoc

* Update viewing-field-stats.asciidoc

* Update canvas-edit-workpads.asciidoc

* Update canvas-expression-lifecycle.asciidoc

* Update canvas-present-workpad.asciidoc

* Update canvas-share-workpad.asciidoc

* Update canvas-tutorial.asciidoc

* Update docs/canvas/canvas-share-workpad.asciidoc

* Update docs/canvas/canvas-share-workpad.asciidoc

* Update docs/canvas/canvas-tutorial.asciidoc

* Update docs/canvas/canvas-tutorial.asciidoc

* Update docs/canvas/canvas-tutorial.asciidoc

* Update docs/canvas/canvas-tutorial.asciidoc

* Update docs/discover/search.asciidoc

* Update docs/discover/set-time-filter.asciidoc

* Update docs/discover/viewing-field-stats.asciidoc

* Update docs/discover/field-filter.asciidoc

* Update docs/discover/document-data.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
2020-09-28 10:53:38 -05:00
Kaarina Tungseth c84532aade
[DOCS] Dashboard-first docs refresh (#76194)
* [DOCS] Dashboard-first refresh

* Fixes broken links and partinto error

* Fixes images in panel table

* Fixes broken links

* Fixes broken drilldowns link

* Fixes images and table

* Removed un needed files and added edit content

* Update docs/getting-started/tutorial-visualizing.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Review comments

* Review comments

* Removed blocks

* Typo fix

* Update docs/getting-started/tutorial-sample-data.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Update docs/getting-started/tutorial-discovering.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Update docs/getting-started/tutorial-sample-data.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Update docs/getting-started/tutorial-visualizing.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Update docs/user/dashboard/edit-dashboards.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Update docs/user/dashboard/dashboard.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Update docs/user/dashboard/dashboard.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Update docs/user/dashboard/aggregation-reference.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Review comments

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
2020-09-03 16:34:25 -05:00
Kaarina Tungseth a5bbbf96b5
[DOCS] Image cleanup (#71258)
* [DOCS] Image clean up

* Second half of images folder

* Fixes errors
2020-07-09 10:38:50 -05:00
Kaarina Tungseth 896b9cddbc
[DOCS] Updates for navigation redesign (#68709)
* [DOCS] Updates for navigation redesign

* Getting started

* Set up text

* Discover

* Dashboard, Graph, ML, Maps, APM, SIEM, Dev tools

* Dev Tools, Stack Monitoring, Management

* Management

* Final changes

* [DOCS] Updates for navigation redesign

* [DOCS] Updates CCR monitoring screenshots

* updates SIEM screenshot and Cases overview text

* Added Brandon's APM image

* [DOCS] Refines CCR shard screenshot

* Removed merge conflict image file

Co-authored-by: lcawl <lcawley@elastic.co>
Co-authored-by: Ben Skelker <ben.skelker@elastic.co>
2020-06-12 09:39:36 -05:00
gchaps 4b620616bc
[DOCS] Fixes titles in Discover, Graph, & Install for consistency (#68685)
* [DOCS] Fixes titles in Discover, Graph, & Install for consistency

* [DOCS] More docs tweaks for consistency
2020-06-10 07:20:55 -07:00
gchaps a3a915ab66
[DOCS] Adds information about query timeout (#64970)
* [DOCS] Adds information about query timeout

* [DOCS] Adds image to search doc

* [DOCS] Improves organization

* Update docs/discover/search.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

* Update docs/discover/search.asciidoc

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>

Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
2020-05-04 11:08:35 -07:00
Kaarina Tungseth 809ec97649
[DOCS] Removed references to left (#60807)
* [DOCS] Removed references to left

* Fixed broken build
2020-04-06 15:37:45 -05:00
Kaarina Tungseth 56006534af
[DOCS] Removed below references (#60159) 2020-03-16 09:58:16 -05:00
Kaarina Tungseth 4dd31a50ef
[DOCS] Added to Add a field column definition (#55116) 2020-01-17 15:13:22 -06:00
gchaps 099ec54c72
[DOCS] Updates Discover documentation (#51837)
* [DOCS] Updates View in Context doc in Discover

* [DOCS] Updates Discover docs on viewing document data

* [DOCS] Adds workflow to Discover docs

* [DOCS] Updates Discover docs intro page

* [DOCS] More updates to Discover docs

* [DOCS] More updates to Discover docs

* [DOCS] Incorporates review comments in Discover docs

* [DOCS] Edits to discover intro

* [DOCS] Edits to Discover docs

* [DOCS] Incorporates edits in Discover docs
2019-12-17 11:48:55 -08:00
Wylie Conlon 5f2a326d89 [Docs] Update and improve docs for Visualize and Discover (#49810)
* [Docs] Update and improve docs for Visualize and Discover

* Create a new section for default editor docs

* Fix significant terms link

* Writer changes

* Remove pages that aren't helpful to users

* More writer changes
2019-11-21 13:57:21 -06:00
Matt Bargar 7f924f96ae
Lucene uses or by default (#50987) 2019-11-19 13:10:23 -05:00
Matt Bargar b354e7dc59
[docs] Improve KQL nested query syntax explanation (#49918) 2019-11-19 12:33:09 -05:00
Matt Bargar 1dcec9d210
Add nested field support to KQL (#47070)
This PR adds a new syntax to KQL for querying nested fields.

Nested fields can be queried in two different ways:

Parts of the query may only match a single nested doc (bool inside nested). This is what most people want when querying on a nested field.
Parts of the query may match different nested docs (nested inside bool). This is how a regular object field works but nested fields can be queried in the same way. Although generally less useful, there are occasions where one might want to query a nested field in this way.
The new KQL syntax supports both.
2019-10-30 13:07:43 -04:00
Kaarina Tungseth d0aa9f1418
[DOCS] Changed time picker to time filter (#46956)
* [DOCS] Changed time picker to time filter

* Final changes

* Review comments

* Review comments pt 2
2019-10-07 15:21:40 -05:00
gchaps 4794462de2
[DOCS] Updates time picker content in Discover doc (#46516)
* [DOCS] Updates time picker content in Discover doc

* [DOCS] Incorporates review comments in time filter doc
2019-09-25 08:17:48 -07:00
Christiane (Tina) Heiligers 8b4971ba75
Saved queries docs (#43731)
* Adds saved query docs to search section

* Adds Saved Queries docs to Discover search

* Makes changes requested by PR review

* Changes 'visualizations and dashboards' to 'Visualize and Dashboard', adds x-pack label back to Read only access section

* Changes some text

* Changes Saving searches section

* Rewords saved queries section

* Changes 'Saved search' to 'saved search', tweeks a few words

* Removes second sentence from intro to saved queries

* Changes save button text reference

* Updates screen shots

* Moves images around, adds a hover instruction to delete a query and adds a screen shot of the delete button

* Makes changes as requested
2019-09-03 10:41:17 -07:00
Brandon Kobel 41b326ece3
[docs][skip ci] Read only access for @elastic/kibana-app applications (#35560)
* Adding read-only mode section to Discover

* No more "mode" or "badge" terminology

* Putting newline back

* Adding "Saving" section for visualize

* Adding dashboard read only access section

* Timelion gets read-only documentation

* Adding read only access section to index patterns and advanced settings

* Adding graph read only access section
2019-06-06 08:08:18 -07:00
Matt Bargar af2da97974
Makes KQL the default query language for new searches (#27092)
Changes the default query language to KQL in all apps that respect the `search:queryLanguage` advanced setting.
2019-02-06 17:18:25 -05:00
Sarah Hersh bf866030c7
fix broken image link of time filter page (#29961) 2019-02-04 11:14:40 -05:00
Sarah Hersh 3cd087663b
[Docs]Updates to Discover docs (#29868) 2019-02-04 10:20:24 -05:00
Matt Bargar fceddf8610
Mention license change for autocomplete 2018-09-25 12:45:22 -04:00
debadair 12e95f6b8f [DOCS] Added float/anchor tags to explicitly define page names (#19288) 2018-05-22 13:59:05 -07:00
Deepansh Bhargava dcd03eaadc Data visualization is mentioned in the documentation of Viewing Field Stats in master branch (#16863) 2018-05-18 12:51:01 -04:00
Matt Bargar aeaf57dd97
Add query enhancements opt-in switch to query bar (#17232)
Makes our language updates more visible to users and removes mentions of Kuery as a separate language. Users still get the old lucene experience by default, but have the option to opt-in to "experimental query features" directly in the query bar. Goal is to get more feedback by making these new features more prominent and less of a jump from lucene.
2018-03-22 15:47:52 -04:00
Lukas Olson e9ff31f185 Update Kuery Syntax (#15857)
This PR evolves Kuery into a simplified, more lucene-like language. In a follow up PR we plan on getting rid of the language switcher dropdown and instead add a checkbox that will allow users to opt-in to this syntax, which will feel less like a separate language and more like a set of enhancements to the existing lucene query syntax.

This PR also updates the simple grammar to solve the following:

* Wildcards in field names
* "is one of" shorthand (e.g. foo:(bar OR baz OR qux))
* Don't split on whitespace (require explicit AND/ORs, case insensitive)
* "exists" query (e.g. foo:*)
* Improved range query shorthands (e.g. foo <= 1)
* Wildcard queries

Since this new syntax is simpler and does not support every filter type like old Kuery did, this PR also brings back the filter bar when kuery is selected in the language picker.

See the documentation updates in this PR if you need an overview of the new syntax (and let us know if the documentation is lacking).
2018-03-07 08:29:34 -08:00
Lukas Olson 19ac99a388 Re-enable filter editor suggestions (#13376)
* Re-enable filter editor suggestions

* Use search instead of include

* Escape query

* Show spinner

* Use include rather than search

* Add additional regex and explanation for parameters

* Add suggestions API test

* Make sure test actually runs

* Use send instead of query

* Fix suggestions API test
2017-08-25 16:38:49 -07:00
Matt Bargar 9e48298844 Emphasize important difference between Kuery and Lucene query syntax (#13592)
Fixes #13563

Brings additional attention to the fact that Kuery uses implicit ANDs whereas Lucene query syntax uses implicit ORs, which could confuse users if they're not aware of the difference.
2017-08-18 16:45:28 -04:00
Matt Bargar f78bb5dc11 Add Kuery docs and break search page into subsections (#13074)
* Add Kuery docs and break search page into subsections
2017-08-02 15:16:00 -04:00
Lukas Olson e3aeb0bdfa Update filter editor docs with addition of advanced option (#13084) 2017-07-26 16:33:16 -07:00
Lukas Olson d49291a386 Fix docs wording for invert filter (#12481) 2017-06-27 10:38:27 -07:00
Lisa Cawley e21a133e00 [DOCS] Update Kibana Guide to use shared attributes (#12505)
* [DOCS] Update Kibana Guide to use shared attributes

* [DOCS] Add docs repository path
2017-06-27 10:13:42 -07:00
Lukas Olson 0e5ee35667 Update docs with the addition of filter editors (#12321)
* Update docs with the addition of filter editors

* Move operators into a table
2017-06-21 18:33:21 -07:00