kibana/docs/getting-started/tutorial-discovering.asciidoc
Kaarina Tungseth c84532aade
[DOCS] Dashboard-first docs refresh (#76194)
* [DOCS] Dashboard-first refresh

* Fixes broken links and partinto error

* Fixes images in panel table

* Fixes broken links

* Fixes broken drilldowns link

* Fixes images and table

* Removed un needed files and added edit content

* Update docs/getting-started/tutorial-visualizing.asciidoc

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>

* Review comments

* Review comments

* Removed blocks

* Typo fix

* Update docs/getting-started/tutorial-sample-data.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Update docs/getting-started/tutorial-discovering.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Update docs/getting-started/tutorial-sample-data.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Update docs/getting-started/tutorial-visualizing.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Update docs/user/dashboard/edit-dashboards.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Update docs/user/dashboard/dashboard.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Update docs/user/dashboard/dashboard.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Update docs/user/dashboard/aggregation-reference.asciidoc

Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>

* Review comments

Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com>
Co-authored-by: Wylie Conlon <wylieconlon@gmail.com>
2020-09-03 16:34:25 -05:00

35 lines
1.2 KiB
Text

[[explore-your-data]]
=== Explore your data
With *Discover*, you use {ref}/query-dsl-query-string-query.html#query-string-syntax[Elasticsearch
queries] to explore your data and narrow the results with filters.
. Open the menu, then go to *Discover*.
+
The `shakes*` index pattern appears.
. To make `ba*` the index, click the *Change Index Pattern* dropdown, then select `ba*`.
+
By default, all fields are shown for each matching document.
. In the *Search* field, enter the following, then click *Update*:
+
[source,text]
account_number<100 AND balance>47500
+
The search returns all account numbers between zero and 99 with balances in
excess of 47,500. Results appear for account numbers 8, 32, 78, 85, and 97.
+
[role="screenshot"]
image::images/tutorial-discover-2.png[]
+
. Hover over the list of *Available fields*, then
click *Add* next to each field you want include in the table.
+
For example, when you add the `account_number` field, the display changes to a list of five
account numbers.
+
[role="screenshot"]
image::images/tutorial-discover-3.png[]
Now that you know what your documents contain, it's time to gain insight into your data with visualizations.