8ce96e3ce4
* Update tutorial-discovering.asciidoc Adds alt text to images in doc. * Update docs/getting-started/tutorial-discovering.asciidoc * Update docs/getting-started/tutorial-discovering.asciidoc Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
36 lines
1.4 KiB
Plaintext
36 lines
1.4 KiB
Plaintext
[[explore-your-data]]
|
|
=== Explore your data
|
|
|
|
With *Discover*, you use {ref}/query-dsl-query-string-query.html#query-string-syntax[Elasticsearch
|
|
queries] to explore your data and narrow the results with filters.
|
|
|
|
. Open the menu, then go to *Discover*.
|
|
+
|
|
The `shakes*` index pattern appears.
|
|
|
|
. To make `ba*` the index, click the *Change Index Pattern* dropdown, then select `ba*`.
|
|
+
|
|
By default, all fields are shown for each matching document.
|
|
|
|
. In the *Search* field, enter the following, then click *Update*:
|
|
+
|
|
[source,text]
|
|
account_number<100 AND balance>47500
|
|
+
|
|
The search returns all account numbers between zero and 99 with balances in
|
|
excess of 47,500. Results appear for account numbers 8, 32, 78, 85, and 97.
|
|
+
|
|
[role="screenshot"]
|
|
image::images/tutorial-discover-2.png[Image showing the search results for account numbers between zero and 99, with balances in excess of 47,500]
|
|
+
|
|
. Hover over the list of *Available fields*, then
|
|
click *Add* next to each field you want include in the table.
|
|
+
|
|
For example, when you add the `account_number` field, the display changes to a list of five
|
|
account numbers.
|
|
+
|
|
[role="screenshot"]
|
|
image::images/tutorial-discover-3.png[Image showing a dropdown with five account numbers, which match the previous query for account balance]
|
|
|
|
Now that you know what your documents contain, it's time to gain insight into your data with visualizations.
|