Kaarina Tungseth
28a7bd31fd
[DOCS] Dashboard changes for 7.13 ( #99681 )
...
* [DOCS] Dashboard changes for 7.13
* Review comments
* Review comments
* Fixes link
* Fixes lens link
2021-05-24 15:14:37 -05:00
gchaps
9b2e8c94d3
[DOCS] Adds a section on runtime fields to the Discover intro ( #99143 )
...
* [DOCS] Adds a section on runtime fields to the Discover intro
* [DOCS] Updates images
* Adds link to runtime fields doc
* [DOCS] Adds note about filtering, editing, and deleting runtime fields
Co-authored-by: KOTungseth <kaarina.tungseth@elastic.co>
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2021-05-12 14:30:25 -07:00
Anton Dosov
ff3badd80d
[Search Sessions] adjust docs for 7.13 changes ( #98919 )
...
Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2021-05-03 11:22:07 +02:00
gchaps
41ded7a8a2
[DOCS] Updates saved searches doc ( #97936 )
...
* [DOCS] Updates saved searches doc
* [DOCS] Adds info on adding a saved search to a dashboard
* [DOCS] Fixes silly typo
* Update docs/discover/save-search.asciidoc
Co-authored-by: Matthias Wilhelm <ankertal@gmail.com>
* Update docs/discover/save-search.asciidoc
Co-authored-by: Matthias Wilhelm <ankertal@gmail.com>
* Update docs/discover/save-search.asciidoc
Co-authored-by: Matthias Wilhelm <ankertal@gmail.com>
* [DOCS] Incorporates review feedback
* [DOCS] Updates doc per review comments
* [DOCS] Fixes description of saved query
* [DOCS] Incorporates review comments
Co-authored-by: Matthias Wilhelm <ankertal@gmail.com>
2021-04-29 10:26:34 -07:00
gchaps
7ef187ec89
[DOCS] Updates images and text in Discover ( #98694 )
...
* [DOCS] Updates images and text in Discover
* [DOCS] Edits after walkthrough
* [DOCS] Fixes typo
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2021-04-29 10:25:50 -07:00
Matthias Wilhelm
58d4164b6c
[Discover][doc] Add view document ( #92472 )
...
* Adds info about the doc viewer of Discover
* Merges with the context view doc
Co-authored-by: Gail Chappell <gail.chappell@elastic.co>
2021-04-29 10:47:17 +02:00
gchaps
e6e36102f0
[DOCS] Reorganizes concepts and discover sections ( #97019 )
...
* [DOCS] Reorganizes concepts and discover sections
* [DOCS] Updates time filter and saved query sections
* Update docs/discover/save-search.asciidoc
Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
* [DOCS] Updates time filter and saved query doc
* [DOCS] Updates images
* [DOCS] Adds missing images
* [DOCS] Minor edits
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
2021-04-21 11:02:00 -07:00
Kaarina Tungseth
1aa6a140dd
Ui changes ( #95989 )
2021-04-01 09:09:11 -05:00
gchaps
ea8efd5ebe
[DOCS] Adds docs for search sessions ( #94661 )
...
* [DOCS] Adds docs for search sessions
* [DOCS] Improves intro and title for search sessions doc
* [DOCS] Fixes bulleted list
* [DOCS] Makes doc title more descriptive
* [DOCS] Incorporates review comments
* [DOCS] Includes a better explanation of restore action
* [DOCS] Changed titled and fixed setting names
* [DOCS] Verified content about maps and restored session
* [DOCS] Fixes setting names
* [DOCS] Changes order of last two steps
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2021-03-22 09:35:08 -07:00
Matthias Wilhelm
88f41565b0
[Discover][Doc] Improve main documentation ( #91854 )
...
Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2021-03-04 19:09:43 +01:00
Matthias Wilhelm
51b416b23f
[Discover] Restore context documentation ( #90784 )
...
Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2021-03-04 17:24:13 +01:00
Matthias Wilhelm
3894ecf862
[Discover][docs] Add search for relevance ( #90611 )
...
Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
Co-authored-by: Lisa Cawley <lcawley@elastic.co>
2021-02-25 21:45:14 +01:00
Wylie Conlon
d4f3420b41
[Docs] Clarify KQL and Lucene docs ( #91065 )
...
* [Docs] Clarify KQL and Lucene docs
* Code review suggestions
2021-02-16 13:06:25 -05:00
gchaps
b181f05141
[DOCS] Adds examples of date range queries ( #88201 )
...
* [DOCS] Adds examples of date range queries
* Update docs/discover/kuery.asciidoc
Co-authored-by: Nicholas Bellerophon <github@nerophon.com>
Co-authored-by: Nicholas Bellerophon <github@nerophon.com>
2021-01-13 08:54:21 -08:00
gchaps
3b6453adcd
[DOCS] Updates images in Discover docs ( #87940 )
2021-01-12 13:59:30 -08:00
Alex Close
f22e06e618
Add timestamp range example to kql docs ( #87138 )
...
A few folks have asked me if it is possible to do timestamp ranges by using "now" in kql. This was missing from an example so I have added it to the docs.
(cherry picked from commit 48df620b1d30a9dcd08423204b66b453e50e587b)
2021-01-05 09:26:28 +00:00
gchaps
a2d13f6211
[DOCS] Fixes typo in saved search doc ( #86808 )
2020-12-22 10:08:50 -08:00
gchaps
d31ee21a86
[DOCS] Fixes typo in KQL doc ( #83860 )
2020-11-20 10:32:09 -08:00
Kaarina Tungseth
57b7702314
[DOCS] Reallocates limitations to point-of-use ( #79582 )
...
* [DOCS] Reallocates limitations to point-of-use
* KQL changes
* Removed limitations file
* Review comments
2020-11-19 10:49:27 -06:00
gchaps
0e565bfd52
[DOCS] Updates Discover docs ( #82773 )
...
* [DOCS] Updates Discover docs
* Update docs/user/discover.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/user/discover.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/user/discover.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/user/discover.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/user/discover.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/user/discover.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/user/discover.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/user/discover.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/user/discover.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* [DOCS] Incorporates review comments
* [DOCS] More changes based on edits
* [DOCS] Edits per lastest review
* [DOCS] Added redirects
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
2020-11-12 09:43:45 -08:00
Kaarina Tungseth
c77619352b
[DOCS] 7.10 Core UI changes ( #80407 )
...
* [DOCS] 7.10 screenCore UI changes
* Kibana access options
* Removed Kibana from Set up Kibana
* Removed rogue symbols
* Update docs/spaces/index.asciidoc
Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
* Update docs/management/managing-beats.asciidoc
Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
* Review comments
* Update docs/user/introduction.asciidoc
Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
* Review comments
* Changed menu to main menu
Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
2020-10-22 09:06:51 -05:00
gchaps
32e54bbbdd
[DOCS] Fixes errors in KQL examples ( #81223 )
2020-10-21 08:41:22 -07:00
gchaps
823ccb82ea
[DOCS] Updates KQL doc ( #77817 )
...
* [DOCS] Updates KQL doc
* [DOCS] Edits to KQL doc
* Update docs/discover/kuery.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/discover/kuery.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/discover/kuery.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/discover/kuery.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/discover/kuery.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/discover/kuery.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/discover/kuery.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/discover/kuery.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/discover/kuery.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/discover/kuery.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/discover/kuery.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/discover/kuery.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/discover/kuery.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/discover/kuery.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Apply suggestions from code review
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* [DOCS] Adds image of autocomplete and other edits
* [DOCS] Minor edit to KQL doc
* [DOCS] Minor edit
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
2020-09-29 10:57:30 -07:00
ncheckin
37d49b0052
updated discover with alt text ( #77660 )
...
* Update context.asciidoc
* Update document-data.asciidoc
* Update field-filter.asciidoc
* Update search.asciidoc
* Update set-time-filter.asciidoc
* Update viewing-field-stats.asciidoc
* Update canvas-edit-workpads.asciidoc
* Update canvas-expression-lifecycle.asciidoc
* Update canvas-present-workpad.asciidoc
* Update canvas-share-workpad.asciidoc
* Update canvas-tutorial.asciidoc
* Update docs/canvas/canvas-share-workpad.asciidoc
* Update docs/canvas/canvas-share-workpad.asciidoc
* Update docs/canvas/canvas-tutorial.asciidoc
* Update docs/canvas/canvas-tutorial.asciidoc
* Update docs/canvas/canvas-tutorial.asciidoc
* Update docs/canvas/canvas-tutorial.asciidoc
* Update docs/discover/search.asciidoc
* Update docs/discover/set-time-filter.asciidoc
* Update docs/discover/viewing-field-stats.asciidoc
* Update docs/discover/field-filter.asciidoc
* Update docs/discover/document-data.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
2020-09-28 10:53:38 -05:00
Kaarina Tungseth
c84532aade
[DOCS] Dashboard-first docs refresh ( #76194 )
...
* [DOCS] Dashboard-first refresh
* Fixes broken links and partinto error
* Fixes images in panel table
* Fixes broken links
* Fixes broken drilldowns link
* Fixes images and table
* Removed un needed files and added edit content
* Update docs/getting-started/tutorial-visualizing.asciidoc
Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
* Review comments
* Review comments
* Removed blocks
* Typo fix
* Update docs/getting-started/tutorial-sample-data.asciidoc
Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
* Update docs/getting-started/tutorial-discovering.asciidoc
Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
* Update docs/getting-started/tutorial-sample-data.asciidoc
Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
* Update docs/getting-started/tutorial-visualizing.asciidoc
Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
* Update docs/user/dashboard/edit-dashboards.asciidoc
Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
* Update docs/user/dashboard/dashboard.asciidoc
Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
* Update docs/user/dashboard/dashboard.asciidoc
Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
* Update docs/user/dashboard/aggregation-reference.asciidoc
Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
* Review comments
Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
2020-09-03 16:34:25 -05:00
Kaarina Tungseth
a5bbbf96b5
[DOCS] Image cleanup ( #71258 )
...
* [DOCS] Image clean up
* Second half of images folder
* Fixes errors
2020-07-09 10:38:50 -05:00
Kaarina Tungseth
896b9cddbc
[DOCS] Updates for navigation redesign ( #68709 )
...
* [DOCS] Updates for navigation redesign
* Getting started
* Set up text
* Discover
* Dashboard, Graph, ML, Maps, APM, SIEM, Dev tools
* Dev Tools, Stack Monitoring, Management
* Management
* Final changes
* [DOCS] Updates for navigation redesign
* [DOCS] Updates CCR monitoring screenshots
* updates SIEM screenshot and Cases overview text
* Added Brandon's APM image
* [DOCS] Refines CCR shard screenshot
* Removed merge conflict image file
Co-authored-by: lcawl <lcawley@elastic.co>
Co-authored-by: Ben Skelker <ben.skelker@elastic.co>
2020-06-12 09:39:36 -05:00
gchaps
4b620616bc
[DOCS] Fixes titles in Discover, Graph, & Install for consistency ( #68685 )
...
* [DOCS] Fixes titles in Discover, Graph, & Install for consistency
* [DOCS] More docs tweaks for consistency
2020-06-10 07:20:55 -07:00
gchaps
a3a915ab66
[DOCS] Adds information about query timeout ( #64970 )
...
* [DOCS] Adds information about query timeout
* [DOCS] Adds image to search doc
* [DOCS] Improves organization
* Update docs/discover/search.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Update docs/discover/search.asciidoc
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
2020-05-04 11:08:35 -07:00
Kaarina Tungseth
809ec97649
[DOCS] Removed references to left ( #60807 )
...
* [DOCS] Removed references to left
* Fixed broken build
2020-04-06 15:37:45 -05:00
Kaarina Tungseth
56006534af
[DOCS] Removed below references ( #60159 )
2020-03-16 09:58:16 -05:00
Kaarina Tungseth
4dd31a50ef
[DOCS] Added to Add a field column definition ( #55116 )
2020-01-17 15:13:22 -06:00
gchaps
099ec54c72
[DOCS] Updates Discover documentation ( #51837 )
...
* [DOCS] Updates View in Context doc in Discover
* [DOCS] Updates Discover docs on viewing document data
* [DOCS] Adds workflow to Discover docs
* [DOCS] Updates Discover docs intro page
* [DOCS] More updates to Discover docs
* [DOCS] More updates to Discover docs
* [DOCS] Incorporates review comments in Discover docs
* [DOCS] Edits to discover intro
* [DOCS] Edits to Discover docs
* [DOCS] Incorporates edits in Discover docs
2019-12-17 11:48:55 -08:00
Wylie Conlon
5f2a326d89
[Docs] Update and improve docs for Visualize and Discover ( #49810 )
...
* [Docs] Update and improve docs for Visualize and Discover
* Create a new section for default editor docs
* Fix significant terms link
* Writer changes
* Remove pages that aren't helpful to users
* More writer changes
2019-11-21 13:57:21 -06:00
Matt Bargar
7f924f96ae
Lucene uses or
by default ( #50987 )
2019-11-19 13:10:23 -05:00
Matt Bargar
b354e7dc59
[docs] Improve KQL nested query syntax explanation ( #49918 )
2019-11-19 12:33:09 -05:00
Matt Bargar
1dcec9d210
Add nested field support to KQL ( #47070 )
...
This PR adds a new syntax to KQL for querying nested fields.
Nested fields can be queried in two different ways:
Parts of the query may only match a single nested doc (bool inside nested). This is what most people want when querying on a nested field.
Parts of the query may match different nested docs (nested inside bool). This is how a regular object field works but nested fields can be queried in the same way. Although generally less useful, there are occasions where one might want to query a nested field in this way.
The new KQL syntax supports both.
2019-10-30 13:07:43 -04:00
Kaarina Tungseth
d0aa9f1418
[DOCS] Changed time picker
to time filter
( #46956 )
...
* [DOCS] Changed time picker to time filter
* Final changes
* Review comments
* Review comments pt 2
2019-10-07 15:21:40 -05:00
gchaps
4794462de2
[DOCS] Updates time picker content in Discover doc ( #46516 )
...
* [DOCS] Updates time picker content in Discover doc
* [DOCS] Incorporates review comments in time filter doc
2019-09-25 08:17:48 -07:00
Christiane (Tina) Heiligers
8b4971ba75
Saved queries docs ( #43731 )
...
* Adds saved query docs to search section
* Adds Saved Queries docs to Discover search
* Makes changes requested by PR review
* Changes 'visualizations and dashboards' to 'Visualize and Dashboard', adds x-pack label back to Read only access section
* Changes some text
* Changes Saving searches section
* Rewords saved queries section
* Changes 'Saved search' to 'saved search', tweeks a few words
* Removes second sentence from intro to saved queries
* Changes save button text reference
* Updates screen shots
* Moves images around, adds a hover instruction to delete a query and adds a screen shot of the delete button
* Makes changes as requested
2019-09-03 10:41:17 -07:00
Brandon Kobel
41b326ece3
[docs][skip ci] Read only access for @elastic/kibana-app applications ( #35560 )
...
* Adding read-only mode section to Discover
* No more "mode" or "badge" terminology
* Putting newline back
* Adding "Saving" section for visualize
* Adding dashboard read only access section
* Timelion gets read-only documentation
* Adding read only access section to index patterns and advanced settings
* Adding graph read only access section
2019-06-06 08:08:18 -07:00
Matt Bargar
af2da97974
Makes KQL the default query language for new searches ( #27092 )
...
Changes the default query language to KQL in all apps that respect the `search:queryLanguage` advanced setting.
2019-02-06 17:18:25 -05:00
Sarah Hersh
bf866030c7
fix broken image link of time filter page ( #29961 )
2019-02-04 11:14:40 -05:00
Sarah Hersh
3cd087663b
[Docs]Updates to Discover docs ( #29868 )
2019-02-04 10:20:24 -05:00
Matt Bargar
fceddf8610
Mention license change for autocomplete
2018-09-25 12:45:22 -04:00
debadair
12e95f6b8f
[DOCS] Added float/anchor tags to explicitly define page names ( #19288 )
2018-05-22 13:59:05 -07:00
Deepansh Bhargava
dcd03eaadc
Data visualization is mentioned in the documentation of Viewing Field Stats in master branch ( #16863 )
2018-05-18 12:51:01 -04:00
Matt Bargar
aeaf57dd97
Add query enhancements opt-in switch to query bar ( #17232 )
...
Makes our language updates more visible to users and removes mentions of Kuery as a separate language. Users still get the old lucene experience by default, but have the option to opt-in to "experimental query features" directly in the query bar. Goal is to get more feedback by making these new features more prominent and less of a jump from lucene.
2018-03-22 15:47:52 -04:00
Lukas Olson
e9ff31f185
Update Kuery Syntax ( #15857 )
...
This PR evolves Kuery into a simplified, more lucene-like language. In a follow up PR we plan on getting rid of the language switcher dropdown and instead add a checkbox that will allow users to opt-in to this syntax, which will feel less like a separate language and more like a set of enhancements to the existing lucene query syntax.
This PR also updates the simple grammar to solve the following:
* Wildcards in field names
* "is one of" shorthand (e.g. foo:(bar OR baz OR qux))
* Don't split on whitespace (require explicit AND/ORs, case insensitive)
* "exists" query (e.g. foo:*)
* Improved range query shorthands (e.g. foo <= 1)
* Wildcard queries
Since this new syntax is simpler and does not support every filter type like old Kuery did, this PR also brings back the filter bar when kuery is selected in the language picker.
See the documentation updates in this PR if you need an overview of the new syntax (and let us know if the documentation is lacking).
2018-03-07 08:29:34 -08:00
Lukas Olson
19ac99a388
Re-enable filter editor suggestions ( #13376 )
...
* Re-enable filter editor suggestions
* Use search instead of include
* Escape query
* Show spinner
* Use include rather than search
* Add additional regex and explanation for parameters
* Add suggestions API test
* Make sure test actually runs
* Use send instead of query
* Fix suggestions API test
2017-08-25 16:38:49 -07:00