Overview
Kibana is an interface program used to visualize and analyze Elasticsearch data. Kibana communicates with the Elasticsearch cluster to retrieve data.One of Kibana’s core features is the ability to monitor logs recorded in Elasticsearch in real-time. This allows you to track and analyze log data in real-time.
Log Search Features
Various features can be used for log search in Kibana:KQL Queries
You can perform advanced log searches using Kibana Query Language (KQL) queries. KQL is a user-friendly query language and facilitates complex filtering operations.
Lucene Syntax
You can write traditional search queries using Lucene query syntax. Lucene offers more advanced and flexible query capabilities.
Filtering Options
You can narrow down logs with multiple filtering options. You can apply field-based, value-based, and time-based filters.
Time Range Selection
You can view logs in a specific time period with time range selection. Predefined ranges such as last 15 minutes, last 1 hour, last 24 hours can be used.
Field-Based Search
You can search by specific fields. For example, you can search for logs containing only error messages, a specific API Proxy, or a username.
Discover Tab
You can view logs using the Discover tab. Discover is Kibana’s primary log viewing interface.
Visualization Options
Log data can be visualized in various ways with Kibana:Timeline Charts
You can visualize the distribution of logs over time with timeline charts. This is useful for trend analysis and anomaly detection.
Histogram Charts
You can view the distribution of log counts with histogram charts. This is useful for understanding log density.
Pie Charts
You can visualize log distribution by categories with pie charts. For example, you can show distribution by error types.
Tables
You can view detailed log information with tables. Tables offer sorting and filtering features.
Heat Maps
You can visually represent log density with heat maps. This is useful for detecting busy time periods.
Area Charts
You can visualize changes over time with area charts. This is ideal for trend analysis.
Kibana Installation
The following steps can be followed for Kibana installation:Windows Installation
1
Download Kibana Version
Download the compatible version of Kibana. You need to select a Kibana version compatible with your Elasticsearch version.
2
Extract File
Extract the downloaded file and save it to the target folder.
3
Edit Configuration File
Edit the
kibana.yml file in the config folder. Configure Elasticsearch connection information and other settings.4
Start Kibana
Start Kibana with the
bin/kibana.bat command.Linux Installation
1
Download Kibana Archive
Download the Kibana archive. Select a version compatible with your Elasticsearch version.
2
Extract Archive
Extract the downloaded archive and place it in the target directory.
3
Edit Configuration File
Edit the
kibana.yml file in the config folder. Configure Elasticsearch connection settings.4
Start Kibana
Start Kibana with the
./bin/kibana command.