From 8e77753a1a39fcddfe51e6bddb2781b5cf0e3979 Mon Sep 17 00:00:00 2001 From: Florent Le Borgne Date: Fri, 10 Oct 2025 17:59:23 +0200 Subject: [PATCH 01/14] Discover tabs --- .../discover/discover-get-started.md | 36 ++++++++++++++++++- 1 file changed, 35 insertions(+), 1 deletion(-) diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index 461114f1b1..c74a24ae47 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -94,6 +94,8 @@ You can later filter the data that shows in the chart and in the table by specif You can combine multiple keywords or characters. For example, `geo dest` finds `geo.dest` and `geo.src.dest`. :::: + {applies_to}`stack: ga 9.2` When they exist in your data, Discover shows a small list of recommended fields to explore. This list is static and managed by Elastic. + 2. Select a field to view its most frequent values. **Discover** shows the top 10 values and the number of records used to calculate those values. @@ -303,6 +305,38 @@ Note that in ES|QL mode, the **Documents** tab is named **Results**. Learn more about how to use ES|QL queries in [Using ES|QL](try-esql.md). +### Run multiple explorations with tabs +```{applies_to} +stack: preview 9.2 +serverless: preview +``` +**Discover** supports multiple tabs to help you explore different aspects of your data simultaneously. Each tab maintains its own independent state, including the query ({{esql}} or KQL), time range, filters, selected data source, columns and sort order your defined, and the active [context-aware experience](#context-aware-discover). + +This allows you to pivot quickly between different explorations without rebuilding everything. For example: + +* **Compare time periods:** Open multiple tabs with the same query but different time ranges +* **Test query variations:** Duplicate a tab to experiment with different {{esql}} queries or filters +* **Switch contexts:** Keep separate tabs for logs, metrics, and traces exploration +* **Test an hypothesis:** Switch between different data sources or field combinations + +#### Manage Discover tabs + +You can open new tabs or duplicate existing ones to compare different queries: +- To start a fresh exploration in a new tab, select the {icon}`plus` icon next to existing tabs. +- To test variations of your current query in a new tab, hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, then select **Duplicate**. + +To manage and organize your tabs as you need, you can: +- Rename them: Hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, then select **Rename**. +- Reorder them: Drag and drop tabs as you choose. +- Close them: Hover over a tab and select the {icon}`cross` icon. +- Close several tabs at once: When you hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, options let you **Close other tabs** to keep only the active tab open or **Close tabs to the right** to only keep your first tabs and discard any inconclusive explorations in subsequent tabs. +- Reopen recently closed tabs: If you close a tab by mistake, you can retrieve it by selecting the {icon}`boxes_vertical` **Tabs bar menu** icon located at the end of the tab bar. + +::::{tip} +Tab state persists when you save a Discover session, so you can resume multi-tab explorations later. +:::: + + ### Inspect your Discover queries :::{include} ../_snippets/inspect-request.md @@ -311,7 +345,7 @@ Learn more about how to use ES|QL queries in [Using ES|QL](try-esql.md). ### Save your Discover session for later use [save-discover-search] -Save your Discover session so you can use it later, generate a CSV report, or use it to create visualizations, dashboards, and Canvas workpads. Saving a Discover session saves the query text, filters, and current view of **Discover**, including the columns selected in the document table, the sort order, and the {{data-source}}. +Save your Discover session so you can use it later, generate a CSV report, or use it to create visualizations, dashboards, and Canvas workpads. Saving a Discover session saves all open tabs, along with their query text, filters, and current view of **Discover**, including the columns selected in the document table, the sort order, and the {{data-source}}. 1. In the application menu bar, click **Save**. 2. Give your session a title and a description. From 0e571e419a18095dbaf132c3c49a98256df02d31 Mon Sep 17 00:00:00 2001 From: Florent Le Borgne Date: Fri, 10 Oct 2025 18:02:26 +0200 Subject: [PATCH 02/14] add sentence about saving --- explore-analyze/discover/discover-get-started.md | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index c74a24ae47..e68da87a98 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -332,10 +332,7 @@ To manage and organize your tabs as you need, you can: - Close several tabs at once: When you hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, options let you **Close other tabs** to keep only the active tab open or **Close tabs to the right** to only keep your first tabs and discard any inconclusive explorations in subsequent tabs. - Reopen recently closed tabs: If you close a tab by mistake, you can retrieve it by selecting the {icon}`boxes_vertical` **Tabs bar menu** icon located at the end of the tab bar. -::::{tip} -Tab state persists when you save a Discover session, so you can resume multi-tab explorations later. -:::: - +To keep all of your tabs ready for a later exploration session, you can [Save your Discover session](#save-discover-search). All currently open tabs are saved within the session and will be there when you open it later. ### Inspect your Discover queries From 1bbfae3268eb41ee7d71bd45f830594ccf14b6a3 Mon Sep 17 00:00:00 2001 From: Florent Le Borgne Date: Fri, 10 Oct 2025 18:06:33 +0200 Subject: [PATCH 03/14] self-review --- explore-analyze/discover/discover-get-started.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index e68da87a98..50cfb286bc 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -310,14 +310,14 @@ Learn more about how to use ES|QL queries in [Using ES|QL](try-esql.md). stack: preview 9.2 serverless: preview ``` -**Discover** supports multiple tabs to help you explore different aspects of your data simultaneously. Each tab maintains its own independent state, including the query ({{esql}} or KQL), time range, filters, selected data source, columns and sort order your defined, and the active [context-aware experience](#context-aware-discover). +**Discover** supports multiple tabs to help you explore different aspects of your data simultaneously. Each tab maintains its own independent state, including the query ({{esql}} or KQL), time range, filters, selected data source, columns and sort order you defined, and the active [context-aware experience](#context-aware-discover). This allows you to pivot quickly between different explorations without rebuilding everything. For example: * **Compare time periods:** Open multiple tabs with the same query but different time ranges * **Test query variations:** Duplicate a tab to experiment with different {{esql}} queries or filters * **Switch contexts:** Keep separate tabs for logs, metrics, and traces exploration -* **Test an hypothesis:** Switch between different data sources or field combinations +* **Test a hypothesis:** Switch between different data sources or field combinations #### Manage Discover tabs From da77175dd1b672fbd0aabb6d118339b5d01dadf3 Mon Sep 17 00:00:00 2001 From: florent-leborgne Date: Sat, 11 Oct 2025 08:06:47 +0200 Subject: [PATCH 04/14] Update explore-analyze/discover/discover-get-started.md Co-authored-by: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com> --- explore-analyze/discover/discover-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index 50cfb286bc..f6c8f817c3 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -325,7 +325,7 @@ You can open new tabs or duplicate existing ones to compare different queries: - To start a fresh exploration in a new tab, select the {icon}`plus` icon next to existing tabs. - To test variations of your current query in a new tab, hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, then select **Duplicate**. -To manage and organize your tabs as you need, you can: +To manage and organize your tabs, you can: - Rename them: Hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, then select **Rename**. - Reorder them: Drag and drop tabs as you choose. - Close them: Hover over a tab and select the {icon}`cross` icon. From 3554f8d66019203a69130009fdcce4e9cd3c02a6 Mon Sep 17 00:00:00 2001 From: florent-leborgne Date: Sat, 11 Oct 2025 08:07:07 +0200 Subject: [PATCH 05/14] Update explore-analyze/discover/discover-get-started.md Co-authored-by: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com> --- explore-analyze/discover/discover-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index f6c8f817c3..2af30852e4 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -327,7 +327,7 @@ You can open new tabs or duplicate existing ones to compare different queries: To manage and organize your tabs, you can: - Rename them: Hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, then select **Rename**. -- Reorder them: Drag and drop tabs as you choose. +- Reorder them: Drag and drop a tab to move it. - Close them: Hover over a tab and select the {icon}`cross` icon. - Close several tabs at once: When you hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, options let you **Close other tabs** to keep only the active tab open or **Close tabs to the right** to only keep your first tabs and discard any inconclusive explorations in subsequent tabs. - Reopen recently closed tabs: If you close a tab by mistake, you can retrieve it by selecting the {icon}`boxes_vertical` **Tabs bar menu** icon located at the end of the tab bar. From 1613b96b684752b6a3f03c1ba71809d3c2196723 Mon Sep 17 00:00:00 2001 From: florent-leborgne Date: Sat, 11 Oct 2025 08:09:22 +0200 Subject: [PATCH 06/14] Update explore-analyze/discover/discover-get-started.md Co-authored-by: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com> --- explore-analyze/discover/discover-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index 2af30852e4..f919212280 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -329,7 +329,7 @@ To manage and organize your tabs, you can: - Rename them: Hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, then select **Rename**. - Reorder them: Drag and drop a tab to move it. - Close them: Hover over a tab and select the {icon}`cross` icon. -- Close several tabs at once: When you hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, options let you **Close other tabs** to keep only the active tab open or **Close tabs to the right** to only keep your first tabs and discard any inconclusive explorations in subsequent tabs. +- Close several tabs at once: When you hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, options let you **Close other tabs** to keep only the active tab open or **Close tabs to the right** to only keep your first tabs and discard any subsequent tabs. - Reopen recently closed tabs: If you close a tab by mistake, you can retrieve it by selecting the {icon}`boxes_vertical` **Tabs bar menu** icon located at the end of the tab bar. To keep all of your tabs ready for a later exploration session, you can [Save your Discover session](#save-discover-search). All currently open tabs are saved within the session and will be there when you open it later. From ea12c9f192dc6f406eb8e5070948108b93a6e256 Mon Sep 17 00:00:00 2001 From: florent-leborgne Date: Thu, 16 Oct 2025 11:46:53 +0200 Subject: [PATCH 07/14] Update explore-analyze/discover/discover-get-started.md Co-authored-by: Davis McPhee --- explore-analyze/discover/discover-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index f919212280..ce8381f1db 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -94,7 +94,7 @@ You can later filter the data that shows in the chart and in the table by specif You can combine multiple keywords or characters. For example, `geo dest` finds `geo.dest` and `geo.src.dest`. :::: - {applies_to}`stack: ga 9.2` When they exist in your data, Discover shows a small list of recommended fields to explore. This list is static and managed by Elastic. + {applies_to}`stack: ga 9.2` For some searches, Discover suggests recommended fields to explore. These suggestions are based on the data you query and are managed by Elastic. 2. Select a field to view its most frequent values. **Discover** shows the top 10 values and the number of records used to calculate those values. From 9371a8c9d933812b45d3d190abe4fcd7e5638b58 Mon Sep 17 00:00:00 2001 From: florent-leborgne Date: Thu, 16 Oct 2025 11:48:19 +0200 Subject: [PATCH 08/14] Update explore-analyze/discover/discover-get-started.md Co-authored-by: Davis McPhee --- explore-analyze/discover/discover-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index ce8381f1db..10517c8d69 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -310,7 +310,7 @@ Learn more about how to use ES|QL queries in [Using ES|QL](try-esql.md). stack: preview 9.2 serverless: preview ``` -**Discover** supports multiple tabs to help you explore different aspects of your data simultaneously. Each tab maintains its own independent state, including the query ({{esql}} or KQL), time range, filters, selected data source, columns and sort order you defined, and the active [context-aware experience](#context-aware-discover). +**Discover** supports multiple tabs to help you explore different aspects of your data simultaneously. Each tab maintains its own independent state, including the query ({{esql}} or classic mode), time range, filters, selected data source, columns and sort order you defined, and the active [context-aware experience](#context-aware-discover). This allows you to pivot quickly between different explorations without rebuilding everything. For example: From 4f8b54c79c2872675ed788f6a6ca5b871d877b5c Mon Sep 17 00:00:00 2001 From: florent-leborgne Date: Thu, 16 Oct 2025 11:48:34 +0200 Subject: [PATCH 09/14] Update explore-analyze/discover/discover-get-started.md Co-authored-by: Davis McPhee --- explore-analyze/discover/discover-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index 10517c8d69..a9f133abf9 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -312,7 +312,7 @@ serverless: preview ``` **Discover** supports multiple tabs to help you explore different aspects of your data simultaneously. Each tab maintains its own independent state, including the query ({{esql}} or classic mode), time range, filters, selected data source, columns and sort order you defined, and the active [context-aware experience](#context-aware-discover). -This allows you to pivot quickly between different explorations without rebuilding everything. For example: +This allows you to pivot quickly between different explorations without losing your place. For example: * **Compare time periods:** Open multiple tabs with the same query but different time ranges * **Test query variations:** Duplicate a tab to experiment with different {{esql}} queries or filters From b35437257964a1af181c108b21dfef615bb40b65 Mon Sep 17 00:00:00 2001 From: florent-leborgne Date: Thu, 16 Oct 2025 11:48:46 +0200 Subject: [PATCH 10/14] Update explore-analyze/discover/discover-get-started.md Co-authored-by: Davis McPhee --- explore-analyze/discover/discover-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index a9f133abf9..899763c744 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -316,7 +316,7 @@ This allows you to pivot quickly between different explorations without losing y * **Compare time periods:** Open multiple tabs with the same query but different time ranges * **Test query variations:** Duplicate a tab to experiment with different {{esql}} queries or filters -* **Switch contexts:** Keep separate tabs for logs, metrics, and traces exploration +* **Switch contexts:** Keep separate tabs for logs, metrics, and traces explorations * **Test a hypothesis:** Switch between different data sources or field combinations #### Manage Discover tabs From 586f7f064636c1c7e0ead76080b0b3c2c8fd26f7 Mon Sep 17 00:00:00 2001 From: florent-leborgne Date: Thu, 16 Oct 2025 11:48:58 +0200 Subject: [PATCH 11/14] Update explore-analyze/discover/discover-get-started.md Co-authored-by: Davis McPhee --- explore-analyze/discover/discover-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index 899763c744..9a819ca08c 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -322,7 +322,7 @@ This allows you to pivot quickly between different explorations without losing y #### Manage Discover tabs You can open new tabs or duplicate existing ones to compare different queries: -- To start a fresh exploration in a new tab, select the {icon}`plus` icon next to existing tabs. +- To start a fresh exploration in a new tab, select the {icon}`plus` icon next to the existing tabs. - To test variations of your current query in a new tab, hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, then select **Duplicate**. To manage and organize your tabs, you can: From 9510689994279bfb55225ed5dd5fcedf45728a1c Mon Sep 17 00:00:00 2001 From: florent-leborgne Date: Thu, 16 Oct 2025 11:50:32 +0200 Subject: [PATCH 12/14] Update explore-analyze/discover/discover-get-started.md --- explore-analyze/discover/discover-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index 9a819ca08c..76adc5e39d 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -326,7 +326,7 @@ You can open new tabs or duplicate existing ones to compare different queries: - To test variations of your current query in a new tab, hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, then select **Duplicate**. To manage and organize your tabs, you can: -- Rename them: Hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, then select **Rename**. +- Rename them: Double-click its label or hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, then select **Rename**. - Reorder them: Drag and drop a tab to move it. - Close them: Hover over a tab and select the {icon}`cross` icon. - Close several tabs at once: When you hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, options let you **Close other tabs** to keep only the active tab open or **Close tabs to the right** to only keep your first tabs and discard any subsequent tabs. From 589f1939b1b11763686e5aa5c171b5271b66e76b Mon Sep 17 00:00:00 2001 From: florent-leborgne Date: Thu, 16 Oct 2025 11:51:07 +0200 Subject: [PATCH 13/14] Update explore-analyze/discover/discover-get-started.md Co-authored-by: Davis McPhee --- explore-analyze/discover/discover-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index 76adc5e39d..5f6cf32374 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -332,7 +332,7 @@ To manage and organize your tabs, you can: - Close several tabs at once: When you hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, options let you **Close other tabs** to keep only the active tab open or **Close tabs to the right** to only keep your first tabs and discard any subsequent tabs. - Reopen recently closed tabs: If you close a tab by mistake, you can retrieve it by selecting the {icon}`boxes_vertical` **Tabs bar menu** icon located at the end of the tab bar. -To keep all of your tabs ready for a later exploration session, you can [Save your Discover session](#save-discover-search). All currently open tabs are saved within the session and will be there when you open it later. +To keep all of your tabs for later, you can [Save your Discover session](#save-discover-search). All currently open tabs are saved within the session and will be there when you open it again. ### Inspect your Discover queries From a541c3de4719485a44a07d95af328b3773e3f0a1 Mon Sep 17 00:00:00 2001 From: florent-leborgne Date: Fri, 17 Oct 2025 10:05:01 +0200 Subject: [PATCH 14/14] Update explore-analyze/discover/discover-get-started.md --- explore-analyze/discover/discover-get-started.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index fc422775fd..82b87f5d9b 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -330,6 +330,10 @@ To manage and organize your tabs, you can: - Reorder them: Drag and drop a tab to move it. - Close them: Hover over a tab and select the {icon}`cross` icon. - Close several tabs at once: When you hover over a tab and select the {icon}`boxes_vertical` **Actions** icon, options let you **Close other tabs** to keep only the active tab open or **Close tabs to the right** to only keep your first tabs and discard any subsequent tabs. + + :::{tip} + If you want to discard all open tabs, you can also start a {icon}`plus` **New session** from the toolbar. When you use this option, any unsaved changes to your current session are lost. + ::: - Reopen recently closed tabs: If you close a tab by mistake, you can retrieve it by selecting the {icon}`boxes_vertical` **Tabs bar menu** icon located at the end of the tab bar. To keep all of your tabs for later, you can [Save your Discover session](#save-discover-search). All currently open tabs are saved within the session and will be there when you open it again.