Skip to content

Commit 18c7ab1

Browse files
Improve Discover page starts based on best practices per content type and include technical summary when appropriate
1 parent 73fcf42 commit 18c7ab1

File tree

8 files changed

+68
-50
lines changed

8 files changed

+68
-50
lines changed

explore-analyze/discover/background-search.md

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -12,18 +12,16 @@ description: Execute long-running searches with background search in Discover an
1212

1313
# Run Discover and Dashboards queries in the background
1414

15+
When searching through years of historical data or running complex queries on large datasets, you can send long-running queries to run in the background. This lets you continue your work in other applications, explore different data, or even close your browser while the search runs. Return anytime to check progress or view completed results.
16+
17+
**Technical summary**: Start a query, click **Send to background** once it begins running, and manage background searches from the {icon}`background_task` toolbar icon. Searches expire after 7 days (configurable through `data.search.sessions.defaultExpiration`). Requires the Background search subfeature permission.
18+
1519
::::{important} - Background search replaces Search sessions
1620

1721
Background search is a feature introduced in version 9.2. It replaces the deprecated **Search sessions** feature.
1822
If you have been using search sessions and upgrade to 9.2, your search sessions aren't lost and become background searches.
1923
::::
2024

21-
Sometimes you might need to search through large amounts of data, no matter how long the search takes. Consider a threat hunting scenario, where you need to search through years of data.
22-
23-
You can send your long-running searches to the background from **Discover** or **Dashboards** and let them run while you continue your work.
24-
25-
You can access your list of background searches at any time to check their status and manage them from the {icon}`background_task` **Background searches** button in the toolbar.
26-
2725
![Send search to background](https://images.contentstack.io/v3/assets/bltefdd0b53724fa2ce/bltee31dcf0d3917c75/68ecf412e5bae49d65a286ff/background-search.gif " =75%")
2826

2927

explore-analyze/discover/discover-get-started.md

Lines changed: 4 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -9,18 +9,14 @@ products:
99
description: Explore Elasticsearch data with Kibana Discover. Select data views, filter and search documents, analyze field values, add runtime fields, and visualize findings to understand patterns.
1010
---
1111

12-
# Explore fields and data with Discover [discover-get-started]
12+
# Get started with Discover [discover-get-started]
1313

14-
Learn how to use **Discover** to:
15-
16-
* **Select** and **filter** your {{es}} data.
17-
* **Explore** the fields and content of your data in depth.
18-
* **Present** your findings in a visualization.
14+
Discover is your starting point for exploring data in {{es}}. Whether you're investigating an issue, learning about your data's structure, or building insights, Discover provides an interactive environment to search, filter, and analyze documents. This tutorial helps you learn the essential workflows and features that make data exploration effective.
1915

2016
**Prerequisites:**
2117

22-
* If you dont already have {{kib}}, [start a free trial](https://www.elastic.co/cloud/elasticsearch-service/signup?baymax=docs-body&elektra=docs) on Elastic Cloud.
23-
* You must have data in {{es}}. Examples on this page use the [ecommerce sample data set](../index.md#gs-get-data-into-kibana), but you can use your own data.
18+
* If you don't already have {{kib}}, [start a free trial](https://www.elastic.co/cloud/elasticsearch-service/signup?baymax=docs-body&elektra=docs) on {{ecloud}}.
19+
* You must have data in {{es}}. The examples on this page use the [ecommerce sample data set](../index.md#gs-get-data-into-kibana), but you can use your own data.
2420
* You should have an understanding of [{{es}} documents and indices](../../manage-data/data-store/index-basics.md).
2521

2622
## Context-aware data exploration [context-aware-discover]

explore-analyze/discover/discover-search-for-relevance.md

Lines changed: 10 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -9,15 +9,21 @@ products:
99
description: Sort Discover results with relevance scoring to surface documents that best match search queries. Focus exploration on the most pertinent results for faster data insights.
1010
---
1111

12-
# Search for relevance [discover-search-for-relevance]
12+
# Sort Discover results by relevance score [discover-search-for-relevance]
1313

14-
{{es}} assigns a relevancy, or score to each document, so you can can narrow your search to the documents with the most relevant results. The higher the score, the better it matches your query.
14+
When searching large datasets, you want the most relevant documents to appear first. {{es}} assigns a relevance score to each document based on how well it matches your query. This guide shows you how to sort results by relevance score in Discover to surface the most pertinent matches.
1515

16-
This example shows how to use **Discover** to list your documents from most relevant to least relevant. This example uses the [sample flights data set](../index.md#gs-get-data-into-kibana), or you can use your own data.
16+
**Technical summary**: Add the `_score` meta field to your document table, clear the default time-based sort, and sort by `_score` in descending order to show most relevant results first.
17+
18+
**Prerequisites:**
19+
20+
* You need a {{data-source}} with searchable text fields
21+
* Works best with text search queries (not filters or time range queries alone)
22+
* This example uses the [sample flights data set](../index.md#gs-get-data-into-kibana), or you can use your own data
1723

1824
1. In **Discover**, open the {{data-source}} dropdown, and select the data that you want to work with.
1925

20-
For the sample flights data, set the {{data-source}} to **Kibana Sample Data Flights**.
26+
For the sample flights data, set the {{data-source}} to **{{kib}} Sample Data Flights**.
2127

2228
2. Run your search. For the sample data, try:
2329

explore-analyze/discover/document-explorer.md

Lines changed: 10 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,10 +11,17 @@ description: Customize data exploration with Discover's table controls. Arrange
1111

1212
# Customize the Discover view [document-explorer]
1313

14-
Fine tune your explorations by customizing **Discover** to bring out the the best view of your documents.
14+
Discover provides extensive customization options for the document table and interface layout. You can adjust table density, row height, column layout, sample size, and sorting to optimize your data exploration workflow. These settings persist across sessions and carry over when you create dashboard panels.
15+
16+
This page covers:
17+
- Hiding and resizing interface areas (chart, fields list, document table)
18+
- Customizing the document table (columns, density, row height, sample size)
19+
- Sorting by single or multiple fields
20+
- Filtering documents and comparing field values
21+
- Editing field display formats
1522

1623
:::{tip}
17-
Discover provides default [context-aware experiences](/explore-analyze/discover/discover-get-started.md#context-aware-discover) tailored to the type of data that you're exploring, and you can further customize your Discover view on top of them.
24+
Discover provides default [context-aware experiences](/explore-analyze/discover/discover-get-started.md#context-aware-discover) tailored to the type of data you're exploring. You can further customize your Discover view on top of these experiences.
1825
:::
1926

2027
:::{image} /explore-analyze/images/kibana-hello-field.png
@@ -93,7 +100,7 @@ To sort by multiple fields:
93100

94101
Change how {{kib}} displays a field.
95102

96-
1. Click the column header for the field, and then select **Edit data view field.**
103+
1. Click the column header for the field, and then select **Edit {{data-source}} field.**
97104
2. In the **Edit field** form, change the field name and format.
98105
For detailed information on formatting options, refer to [Format data fields](../find-and-organize/data-views.md#managing-fields).
99106

explore-analyze/discover/run-pattern-analysis-discover.md

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
---
2+
navigation_title: "Pattern analysis"
23
mapped_pages:
34
- https://www.elastic.co/guide/en/kibana/current/run-pattern-analysis-discover.html
45
applies_to:
@@ -9,16 +10,20 @@ products:
910
description: Detect patterns in unstructured logs with Discover's pattern analysis. Categorize log messages, identify common structures, and filter out noise during troubleshooting.
1011
---
1112

12-
# Run a pattern analysis on your log data [run-pattern-analysis-discover]
13+
# Analyze log patterns in Discover [run-pattern-analysis-discover]
1314

14-
Log pattern analysis helps you to find patterns in unstructured log messages and makes it easier to examine your data. It performs categorization analysis on a selected field of a {{data-source}}, creates categories based on the data and displays them together with a chart that shows the distribution of each category and an example document that matches the category.
15+
When troubleshooting with unstructured log data, manually identifying patterns is time-consuming. Pattern analysis automatically categorizes log messages to help you find common structures and filter out noise during investigation. This guide shows you how to run pattern analysis in Discover.
1516

16-
Log pattern analysis works on every text field.
17+
**Technical summary**: Open the **Patterns** tab in Discover, select a text field for analysis, adjust the minimum time range if needed, and filter or exclude patterns to focus on actionable data.
1718

18-
This example uses the [sample web logs data](../index.md#gs-get-data-into-kibana), or you can use your own data.
19+
**Prerequisites:**
20+
21+
* You need a {{data-source}} with text fields containing log data
22+
* Pattern analysis works on any text field in your data
23+
* This example uses the [sample web logs data](../index.md#gs-get-data-into-kibana), or you can use your own data
1924

2025
1. Go to **Discover**.
21-
2. Expand the {{data-source}} dropdown, and select **Kibana Sample Data Logs**.
26+
2. Expand the {{data-source}} dropdown, and select **{{kib}} Sample Data Logs**.
2227
3. If you don’t see any results, expand the time range, for example, to **Last 15 days**.
2328
4. Click the **Patterns** tab next to **Documents** and **Field statistics**. The pattern analysis starts. The results are displayed under the chart. You can change the analyzed field by using the field selector. In the **Pattern analysis menu**, you can change the **Minimum time range**. This option enables you to widen the time range for calculating patterns which improves accuracy. The patterns, however, are still displayed by the time range you selected in step 3.
2429

explore-analyze/discover/save-open-search.md

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -10,14 +10,20 @@ products:
1010
description: Preserve exploration work with saved Discover sessions that store queries, filters, column selections, and data views. Reuse explorations, share with teams, or add to dashboards.
1111
---
1212

13-
# Discover sessions: Save a search for reuse [save-open-search]
13+
# Save and reuse Discover searches [save-open-search]
1414

15-
A saved Discover session is a convenient way to reuse a search that you’ve created in **Discover**. Discover sessions are good for saving a configured view of Discover to use later or adding search results to a dashboard, and can also serve as a foundation for building visualizations.
15+
After configuring a search with specific queries, filters, and column selections, you can save your work as a Discover session. This lets you reopen the exact view later, share it with team members, or add the results to a dashboard. Saved sessions preserve all aspects of your exploration for future use.
1616

17+
**Technical summary**: Click **Save** in the toolbar, name your session, and optionally store time range and tags. Saved sessions preserve query text, filters, selected {{data-source}}, columns, sort order, and document table configuration.
18+
19+
**Prerequisites:**
20+
21+
* You need privileges to save Discover sessions (refer to [Granting access to {{kib}}](elasticsearch://reference/elasticsearch/roles.md))
22+
* If a read-only indicator appears, you can view but not save sessions
1723

1824
## Read-only access [discover-read-only-access]
1925

20-
If you dont have sufficient privileges to save Discover sessions, the following indicator is displayed and the **Save** button is not visible. For more information, refer to [Granting access to {{kib}}](elasticsearch://reference/elasticsearch/roles.md).
26+
If you don't have sufficient privileges to save Discover sessions, the following indicator is displayed and the **Save** button is not visible.
2127

2228
:::{image} /explore-analyze/images/kibana-read-only-badge.png
2329
:alt: Example of Discover's read only access indicator in Kibana's header

explore-analyze/discover/show-field-statistics.md

Lines changed: 13 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -9,22 +9,25 @@ products:
99
description: Examine field distributions and value ranges with Discover's Field statistics view. Identify data quality issues, understand cardinality, and create visualizations from field data.
1010
---
1111

12-
# View field statistics [show-field-statistics]
12+
# View field statistics in Discover [show-field-statistics]
1313

14-
Explore the fields in your data with the **Field statistics** view in **Discover** and answer such questions as:
14+
Field statistics view in Discover shows distribution patterns, cardinality, and value ranges for fields in your data. Use this view to assess data quality, understand field usage, identify outliers, and create quick visualizations from field distributions. Statistics vary by field type. Numeric fields show ranges and distributions, while geo fields display coordinate maps.
1515

16-
* What does the latency look like when one of the containers is down on a Sunday?
17-
* Is the field type and format in the data view appropriate for the data and its cardinality?
16+
Field statistics help you answer questions like:
17+
* What's the distribution of values across a field?
18+
* Are there unexpected patterns or outliers in the data?
19+
* Is the field format appropriate for its cardinality?
20+
* What does latency look like when one of the containers is down on a specific day?
1821

19-
:::{note}
20-
Field statistics aren't available when **Discover** is in {{esql}} mode.
21-
:::
22+
**Prerequisites:**
2223

23-
This example explores the fields in the [sample web logs data](../index.md#gs-get-data-into-kibana), or you can use your own data.
24+
* You need a {{data-source}} with data to explore
25+
* Field statistics aren't available when Discover is in {{esql}} mode
26+
* This example uses [sample web logs data](../index.md#gs-get-data-into-kibana), or you can use your own data
2427

2528
1. Go to **Discover**.
26-
2. Expand the {{data-source}} dropdown, and select **Kibana Sample Data Logs**.
27-
3. If you dont see any results, expand the time range, for example, to **Last 7 days**.
29+
2. Expand the {{data-source}} dropdown, and select **{{kib}} Sample Data Logs**.
30+
3. If you don't see any results, expand the time range, for example, to **Last 7 days**.
2831
4. Click **Field statistics**.
2932
The table summarizes how many documents in the sample contain each field for the selected time period the number of distinct values, and the distribution.
3033

explore-analyze/discover/try-esql.md

Lines changed: 8 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -9,24 +9,21 @@ products:
99
description: Query Elasticsearch data with ES|QL in Discover to explore any indices without predefining data views. Filter, aggregate, sort results, and build dynamic visualizations.
1010
---
1111

12-
# Using ES|QL [try-esql]
12+
# Get started with {{esql}} in Discover [try-esql]
1313

14-
The Elasticsearch Query Language, {{esql}}, makes it easier to explore your data without leaving Discover.
14+
{{esql}} brings a powerful piped query language directly into Discover, letting you work with your data more flexibly. Unlike traditional searches that require predefined {{data-sources}}, {{esql}} queries can target any index and reshape results on the fly. This tutorial helps you learn {{esql}} syntax fundamentals by progressively building queries that filter, sort, and aggregate data.
1515

16-
The examples on this page use the {{kib}} sample web logs in Discover and Lens to explore the data and create visualizations. You can also install it by following [Add sample data](../index.md#gs-get-data-into-kibana).
16+
**Prerequisites:**
1717

18-
::::{tip}
19-
For the complete {{esql}} documentation, including all supported commands, functions, and operators, refer to the [{{esql}} reference](elasticsearch://reference/query-languages/esql/esql-syntax-reference.md). For a more detailed overview of {{esql}} in {{kib}}, refer to [Use {{esql}} in Kibana](../query-filter/languages/esql-kibana.md).
18+
* You need access to {{kib}} (version 8.11 or later for {{esql}} support)
19+
* The `enableESQL` setting must be enabled from {{kib}}'s **Advanced Settings**. It is enabled by default.
20+
* The examples use the [sample web logs data](../index.md#gs-get-data-into-kibana). Install it or use your own data.
2021

22+
::::{tip}
23+
For the complete {{esql}} documentation, including all supported commands, functions, and operators, refer to the [{{esql}} reference](elasticsearch://reference/query-languages/esql/esql-syntax-reference.md). For a more detailed overview of {{esql}} in {{kib}}, refer to [Use {{esql}} in {{kib}}](../query-filter/languages/esql-kibana.md).
2124
::::
2225

2326

24-
25-
## Prerequisite [prerequisite]
26-
27-
To view the {{esql}} option in **Discover**, the `enableESQL` setting must be enabled from Kibana’s **Advanced Settings**. It is enabled by default.
28-
29-
3027
## Use {{esql}} [tutorial-try-esql]
3128

3229
To load the sample data:

0 commit comments

Comments
 (0)