From 0232fe38463ac6fd3ce1746c3083fcbabc462f22 Mon Sep 17 00:00:00 2001 From: Florent Le Borgne Date: Tue, 25 Nov 2025 17:24:37 +0100 Subject: [PATCH 01/10] Refine 20 first lines of Discover doc pages for better SEO --- .gitignore | 2 +- explore-analyze/discover.md | 14 ++++++++++--- explore-analyze/discover/background-search.md | 8 ++++---- .../discover/discover-get-started.md | 15 ++++++-------- .../discover/discover-search-for-relevance.md | 11 ++++++++-- explore-analyze/discover/document-explorer.md | 8 +++++++- .../discover/run-pattern-analysis-discover.md | 11 +++++++--- explore-analyze/discover/save-open-search.md | 9 ++++++++- .../discover/show-field-statistics.md | 10 +++++++--- explore-analyze/discover/try-esql.md | 20 +++++++++---------- 10 files changed, 71 insertions(+), 37 deletions(-) diff --git a/.gitignore b/.gitignore index 102aa91b50..15f139c8e1 100644 --- a/.gitignore +++ b/.gitignore @@ -9,7 +9,7 @@ # Add LLM/AI related files AGENTS.md .github/copilot-instructions.md -.github/instructions/**.instructions.md +.github/instructions CLAUDE.md GEMINI.md .cursor diff --git a/explore-analyze/discover.md b/explore-analyze/discover.md index b32440aaf9..6373d395ba 100644 --- a/explore-analyze/discover.md +++ b/explore-analyze/discover.md @@ -6,14 +6,22 @@ applies_to: serverless: ga products: - id: kibana +description: Use Discover to search and filter documents, analyze field structures, visualize patterns, and save findings to reuse later or share with dashboards. --- # Discover [discover] -You have questions about your data. What pages on your website contain a specific word or phrase? What events were logged most recently? What processes take longer than 500 milliseconds to respond? +**Discover** is the primary tool for exploring your {{product.elasticsearch}} data in {{product.kibana}}. Search and filter documents, analyze field structures, visualize patterns, and save findings to reuse later or share with dashboards. Whether investigating issues, analyzing trends, or validating data quality, **Discover** offers a flexible interface for understanding your data. -$$$save-your-search$$$ -With **Discover**, you can quickly search and filter your data, get information about the structure of the fields, and display your findings in a visualization. You can also customize and save your Discover sessions and place them on a dashboard. +Key capabilities: + +- Search with KQL, Lucene, or {{esql}} queries +- Analyze field statistics and distributions +- Create visualizations from your data +- Save searches for reuse and sharing +- Run pattern analysis on log data +- Get Context-aware experiences for logs, metrics, and traces +- Run Background search for long-running queries :::{image} /explore-analyze/images/kibana-hello-field.png :alt: A view of the Discover app diff --git a/explore-analyze/discover/background-search.md b/explore-analyze/discover/background-search.md index ecb741cfa4..8141022ff2 100644 --- a/explore-analyze/discover/background-search.md +++ b/explore-analyze/discover/background-search.md @@ -7,10 +7,10 @@ applies_to: serverless: unavailable products: - id: kibana -description: Send your long-running queries to run in the background with background searches and search sessions, and focus on your other tasks while they complete. +description: Send long-running queries to run in the background with background searches from Discover and Dashboards. Continue working while queries complete and access results later. --- -# Run Discover and Dashboards queries in the background +# Run Discover and Dashboards queries in the background [background-search] ::::{important} - Background search replaces Search sessions @@ -18,9 +18,9 @@ Background search is a feature introduced in version 9.2. It replaces the deprec If you have been using search sessions and upgrade to 9.2, your search sessions aren't lost and become background searches. :::: -Sometimes you might need to search through large amounts of data, no matter how long the search takes. Consider a threat hunting scenario, where you need to search through years of data. +Sometimes you might need to search through large amounts of data, no matter how long the search takes. Consider a threat hunting scenario, where you need to search through years of data. -You can send your long-running searches to the background from **Discover** or **Dashboards** and let them run while you continue your work. +You can send your long-running searches to the background from **Discover** or **Dashboards** and let them run while you continue your work. You can access your list of background searches at any time to check their status and manage them from the {icon}`background_task` **Background searches** button in the toolbar. diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index 4392fd27a4..54bebbefed 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -6,21 +6,18 @@ applies_to: serverless: ga products: - id: kibana +description: Step-by-step tutorial for exploring data with Discover by selecting data views, filtering documents, analyzing fields, and creating visualizations using sample or your own data. --- # Explore fields and data with Discover [discover-get-started] -Learn how to use **Discover** to: +**Discover** provides a flexible interface for exploring your {{product.elasticsearch}} data. Learn how to select and filter data, explore field structures and document content, and present your findings in visualizations. This tutorial walks you through the core workflows for analyzing data in **Discover**, from loading data to creating and saving visualizations. -* **Select** and **filter** your {{es}} data. -* **Explore** the fields and content of your data in depth. -* **Present** your findings in a visualization. +## Prerequisites -**Prerequisites:** - -* If you don’t already have {{kib}}, [start a free trial](https://www.elastic.co/cloud/elasticsearch-service/signup?baymax=docs-body&elektra=docs) on Elastic Cloud. -* You must have data in {{es}}. Examples on this page use the [ecommerce sample data set](../index.md#gs-get-data-into-kibana), but you can use your own data. -* You should have an understanding of [{{es}} documents and indices](../../manage-data/data-store/index-basics.md). +* Access to {{product.kibana}}. If you don't already have {{product.kibana}}, [start a free trial](https://www.elastic.co/cloud/elasticsearch-service/signup?baymax=docs-body&elektra=docs) on Elastic Cloud. +* Data in {{product.elasticsearch}}. Examples on this page use the [ecommerce sample data set](../index.md#gs-get-data-into-kibana), but you can use your own data. +* Understanding of [{{product.elasticsearch}} documents and indices](../../manage-data/data-store/index-basics.md). ## Context-aware data exploration [context-aware-discover] diff --git a/explore-analyze/discover/discover-search-for-relevance.md b/explore-analyze/discover/discover-search-for-relevance.md index 18dcc5bb2b..dcfacc292a 100644 --- a/explore-analyze/discover/discover-search-for-relevance.md +++ b/explore-analyze/discover/discover-search-for-relevance.md @@ -6,13 +6,20 @@ applies_to: serverless: ga products: - id: kibana +description: Sort search results by relevance score in Discover to identify the documents that best match your query. Use the score field to prioritize the most relevant data. --- # Search for relevance [discover-search-for-relevance] -{{es}} assigns a relevancy, or score to each document, so you can can narrow your search to the documents with the most relevant results. The higher the score, the better it matches your query. +{{product.elasticsearch}} assigns a relevancy score to each document based on how well it matches your query. Sorting by this score helps you identify the most relevant results quickly. This guide shows how to use **Discover** to sort documents by relevance score, putting the best matches at the top of your results. -This example shows how to use **Discover** to list your documents from most relevant to least relevant. This example uses the [sample flights data set](../index.md#gs-get-data-into-kibana), or you can use your own data. +## Requirements + +- Access to {{product.kibana}} +- A {{data-source}} with searchable data +- Understanding of basic search queries + +This example uses the [sample flights data set](../index.md#gs-get-data-into-kibana), or you can use your own data. 1. In **Discover**, open the {{data-source}} dropdown, and select the data that you want to work with. diff --git a/explore-analyze/discover/document-explorer.md b/explore-analyze/discover/document-explorer.md index e36d513104..f96642ab76 100644 --- a/explore-analyze/discover/document-explorer.md +++ b/explore-analyze/discover/document-explorer.md @@ -6,11 +6,17 @@ applies_to: serverless: ga products: - id: kibana +description: Customize the Discover view with flexible display options for the document table, chart, and sidebar. Adjust columns, density, row height, and field visibility for optimal exploration. --- # Customize the Discover view [document-explorer] -Fine tune your explorations by customizing **Discover** to bring out the the best view of your documents. +**Discover** offers flexible customization options to optimize your data exploration experience. Adjust the document table layout, modify column arrangements, control chart and sidebar visibility, and configure display density to focus on the data that matters most. These customizations persist across sessions and help you work more efficiently with your {{product.elasticsearch}} data. + +## Requirements + +- Access to {{product.kibana}} +- A {{data-source}} with data to explore :::{tip} Discover provides default [context-aware experiences](/explore-analyze/discover/discover-get-started.md#context-aware-discover) tailored to the type of data that you're exploring, and you can further customize your Discover view on top of them. diff --git a/explore-analyze/discover/run-pattern-analysis-discover.md b/explore-analyze/discover/run-pattern-analysis-discover.md index 127922d84c..d229b6a8c7 100644 --- a/explore-analyze/discover/run-pattern-analysis-discover.md +++ b/explore-analyze/discover/run-pattern-analysis-discover.md @@ -6,15 +6,20 @@ applies_to: serverless: ga products: - id: kibana +description: Detect patterns in unstructured logs with pattern analysis in Discover. Categorize log messages, identify common structures, and filter noise during troubleshooting. --- # Run a pattern analysis on your log data [run-pattern-analysis-discover] -Log pattern analysis helps you to find patterns in unstructured log messages and makes it easier to examine your data. It performs categorization analysis on a selected field of a {{data-source}}, creates categories based on the data and displays them together with a chart that shows the distribution of each category and an example document that matches the category. +Pattern analysis in **Discover** helps you find patterns in unstructured log messages by performing categorization analysis on text fields. It creates categories based on message structures, displays their distribution in a chart, and provides example documents for each pattern. This makes it easier to identify common log patterns, filter out noise, and focus on anomalous messages during troubleshooting. -Log pattern analysis works on every text field. +## Requirements -This example uses the [sample web logs data](../index.md#gs-get-data-into-kibana), or you can use your own data. +- Access to {{product.kibana}} +- A {{data-source}} with log data containing text fields +- Understanding of basic log analysis concepts + +Pattern analysis works on any text field. This example uses the [sample web logs data](../index.md#gs-get-data-into-kibana), or you can use your own data. 1. Go to **Discover**. 2. Expand the {{data-source}} dropdown, and select **Kibana Sample Data Logs**. diff --git a/explore-analyze/discover/save-open-search.md b/explore-analyze/discover/save-open-search.md index dc485a0f03..7f2b0f793b 100644 --- a/explore-analyze/discover/save-open-search.md +++ b/explore-analyze/discover/save-open-search.md @@ -7,11 +7,18 @@ applies_to: serverless: ga products: - id: kibana +description: Save Discover sessions to reuse searches, queries, and configured views. Add saved searches to dashboards or use them as a foundation for building visualizations. --- # Discover sessions: Save a search for reuse [save-open-search] -A saved Discover session is a convenient way to reuse a search that you’ve created in **Discover**. Discover sessions are good for saving a configured view of Discover to use later or adding search results to a dashboard, and can also serve as a foundation for building visualizations. +Saved Discover sessions preserve your queries, filters, column selections, and view configurations for reuse. Save sessions to return to specific data explorations, share search results with team members, add searches to dashboards, or use them as a foundation for building visualizations. This guide shows how to save, reopen, duplicate, and manage Discover sessions. + +## Requirements + +- Access to {{product.kibana}} +- Permissions to save {{product.kibana}} objects (see [Read-only access](#discover-read-only-access)) +- A configured view in **Discover** worth saving ## Read-only access [discover-read-only-access] diff --git a/explore-analyze/discover/show-field-statistics.md b/explore-analyze/discover/show-field-statistics.md index a26e5b0141..9c8467d379 100644 --- a/explore-analyze/discover/show-field-statistics.md +++ b/explore-analyze/discover/show-field-statistics.md @@ -6,14 +6,18 @@ applies_to: serverless: ga products: - id: kibana +description: Explore field statistics in Discover to view distributions, top values, and data quality metrics. Analyze numeric ranges, geographic coordinates, and field cardinality. --- # View field statistics [show-field-statistics] -Explore the fields in your data with the **Field statistics** view in **Discover** and answer such questions as: +The **Field statistics** view in **Discover** provides statistical summaries and visualizations of your data fields. View distributions, top values, minimum and maximum ranges, and cardinality to quickly understand your data quality and patterns. Use field statistics to identify data issues, understand field characteristics, and discover insights before building visualizations. -* What does the latency look like when one of the containers is down on a Sunday? -* Is the field type and format in the data view appropriate for the data and its cardinality? +## Requirements + +- Access to {{product.kibana}} +- A {{data-source}} with data to analyze +- **Discover** in default mode (field statistics aren't available in {{esql}} mode) :::{note} Field statistics aren't available when **Discover** is in {{esql}} mode. diff --git a/explore-analyze/discover/try-esql.md b/explore-analyze/discover/try-esql.md index 053350650f..79213e4bed 100644 --- a/explore-analyze/discover/try-esql.md +++ b/explore-analyze/discover/try-esql.md @@ -6,24 +6,24 @@ applies_to: serverless: ga products: - id: kibana +description: Step-by-step tutorial for querying data with ES|QL in Discover using piped commands to filter, transform, and aggregate data with sample data and visualizations. --- # Using ES|QL [try-esql] -The Elasticsearch Query Language, {{esql}}, makes it easier to explore your data without leaving Discover. +Elasticsearch Query Language ({{esql}}) makes it easier to explore and analyze your {{product.elasticsearch}} data directly in **Discover**. {{esql}} uses a piped syntax where you chain commands together to filter, transform, and aggregate data without needing to switch between different query interfaces. This tutorial walks you through querying sample data with {{esql}}, from basic field selection to complex filtering and visualization. -The examples on this page use the {{kib}} sample web logs in Discover and Lens to explore the data and create visualizations. You can also install it by following [Add sample data](../index.md#gs-get-data-into-kibana). - -::::{tip} -For the complete {{esql}} documentation, including all supported commands, functions, and operators, refer to the [{{esql}} reference](elasticsearch://reference/query-languages/esql/esql-syntax-reference.md). For a more detailed overview of {{esql}} in {{kib}}, refer to [Use {{esql}} in Kibana](../query-filter/languages/esql-kibana.md). - -:::: +## Prerequisites +- Access to {{product.kibana}} +- The `enableESQL` setting enabled in **Advanced Settings** (enabled by default) +- Sample data installed (optional but recommended for following examples) +The examples on this page use the {{product.kibana}} sample web logs to explore data and create visualizations. You can install sample data by following [Add sample data](../index.md#gs-get-data-into-kibana). -## Prerequisite [prerequisite] - -To view the {{esql}} option in **Discover**, the `enableESQL` setting must be enabled from Kibana’s **Advanced Settings**. It is enabled by default. +::::{tip} +For the complete {{esql}} documentation, including all supported commands, functions, and operators, refer to the [{{esql}} reference](elasticsearch://reference/query-languages/esql/esql-syntax-reference.md). For a more detailed overview of {{esql}} in {{product.kibana}}, refer to [Use {{esql}} in Kibana](../query-filter/languages/esql-kibana.md). +:::: ## Use {{esql}} [tutorial-try-esql] From cbc1bfa5223fbbfae7cd2d4e0981fcc2f87dd740 Mon Sep 17 00:00:00 2001 From: Florent Le Borgne Date: Tue, 25 Nov 2025 17:25:52 +0100 Subject: [PATCH 02/10] finetuning --- explore-analyze/discover/run-pattern-analysis-discover.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/explore-analyze/discover/run-pattern-analysis-discover.md b/explore-analyze/discover/run-pattern-analysis-discover.md index d229b6a8c7..ddcaece4c4 100644 --- a/explore-analyze/discover/run-pattern-analysis-discover.md +++ b/explore-analyze/discover/run-pattern-analysis-discover.md @@ -6,7 +6,7 @@ applies_to: serverless: ga products: - id: kibana -description: Detect patterns in unstructured logs with pattern analysis in Discover. Categorize log messages, identify common structures, and filter noise during troubleshooting. +description: Detect patterns in unstructured data with pattern analysis in Discover. Categorize log messages, identify common structures, and filter noise during troubleshooting. --- # Run a pattern analysis on your log data [run-pattern-analysis-discover] From 9404dde8e95251753e35ecb82044891987bd1a93 Mon Sep 17 00:00:00 2001 From: Florent Le Borgne Date: Tue, 25 Nov 2025 17:36:10 +0100 Subject: [PATCH 03/10] fix a link --- explore-analyze/visualize/manage-panels.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/explore-analyze/visualize/manage-panels.md b/explore-analyze/visualize/manage-panels.md index 19e6b161be..92450b8750 100644 --- a/explore-analyze/visualize/manage-panels.md +++ b/explore-analyze/visualize/manage-panels.md @@ -84,7 +84,7 @@ There are three types of **Discover** interactions you can add to dashboard pane To use series data interactions, click a data series in the panel. -* **Discover session interactions** — Opens [saved Discover session](../discover.md#save-your-search) data in **Discover**. +* **Discover session interactions** — Opens [saved Discover session](../discover/save-open-search.md) data in **Discover**. To use saved Discover session interactions, open the panel menu and click **View Discover session**. From 61da032a1eccea35cd0ef26ae4d85debacff9c4a Mon Sep 17 00:00:00 2001 From: florent-leborgne Date: Tue, 25 Nov 2025 17:37:32 +0100 Subject: [PATCH 04/10] Update explore-analyze/discover/save-open-search.md --- explore-analyze/discover/save-open-search.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/explore-analyze/discover/save-open-search.md b/explore-analyze/discover/save-open-search.md index 7f2b0f793b..0a146ea1aa 100644 --- a/explore-analyze/discover/save-open-search.md +++ b/explore-analyze/discover/save-open-search.md @@ -17,7 +17,7 @@ Saved Discover sessions preserve your queries, filters, column selections, and v ## Requirements - Access to {{product.kibana}} -- Permissions to save {{product.kibana}} objects (see [Read-only access](#discover-read-only-access)) +- Permissions to save {{product.kibana}} objects. Refer to [Read-only access](#discover-read-only-access) - A configured view in **Discover** worth saving From 64102de40a4d5978c1d481b63920451dfa9ff92a Mon Sep 17 00:00:00 2001 From: Florent Le Borgne Date: Tue, 25 Nov 2025 17:43:06 +0100 Subject: [PATCH 05/10] Better overview page --- explore-analyze/discover.md | 51 +++++++++++++++++++++++++++++-------- 1 file changed, 41 insertions(+), 10 deletions(-) diff --git a/explore-analyze/discover.md b/explore-analyze/discover.md index 6373d395ba..422f538a29 100644 --- a/explore-analyze/discover.md +++ b/explore-analyze/discover.md @@ -13,18 +13,49 @@ description: Use Discover to search and filter documents, analyze field structur **Discover** is the primary tool for exploring your {{product.elasticsearch}} data in {{product.kibana}}. Search and filter documents, analyze field structures, visualize patterns, and save findings to reuse later or share with dashboards. Whether investigating issues, analyzing trends, or validating data quality, **Discover** offers a flexible interface for understanding your data. -Key capabilities: - -- Search with KQL, Lucene, or {{esql}} queries -- Analyze field statistics and distributions -- Create visualizations from your data -- Save searches for reuse and sharing -- Run pattern analysis on log data -- Get Context-aware experiences for logs, metrics, and traces -- Run Background search for long-running queries - :::{image} /explore-analyze/images/kibana-hello-field.png :alt: A view of the Discover app :screenshot: ::: +## What you can do with Discover + +**Search and explore** +: Search through your data using KQL, Lucene, or {{esql}}. Filter results to focus on what matters. Discover adapts its interface based on the type of data you're exploring, providing specialized experiences for logs, metrics, and other data types. + +**Analyze fields and documents** +: View field statistics, examine individual documents, compare multiple documents side by side, and find patterns in your log data. + +**Visualize on the fly** +: Create quick visualizations from aggregatable fields, or use {{esql}} to build charts directly from your queries. + +**Save and share** +: Save your Discover sessions to reuse later, add them to dashboards, or share them with your team. You can also generate reports and create alerts based on your searches. + +## Get started + +New to Discover? Start with these resources: + +* **[Get started with Discover](discover/discover-get-started.md)** - A hands-on tutorial that walks you through exploring data, from loading data to filtering and visualizing your findings. +* **[Using {{esql}}](discover/try-esql.md)** - Learn how to use the {{es}} Query Language for powerful data exploration. + +## Common tasks + +Once you're familiar with the basics, explore these guides for specific tasks: + +* **[Search and filter data](discover/discover-get-started.md)** - Build queries and apply filters to narrow down your results. +* **[Customize the Discover view](discover/document-explorer.md)** - Adjust the layout, columns, and display options to suit your needs. +* **[Save a search for reuse](discover/save-open-search.md)** - Save your Discover sessions and add them to dashboards. + +## Advanced features + +Explore the **Discover** documentation to learn more about the following capabilities: + +* Compare documents side by side +* Add runtime fields to your {{data-source}} +* Work with multiple tabs +* Understand context-aware experiences +* Run queries in the background +* Generate alerts +* Analyze field statistics and patterns +* Search for relevance \ No newline at end of file From 0217470f81fd34ee2864db6f754daac443a5db95 Mon Sep 17 00:00:00 2001 From: Florent Le Borgne Date: Wed, 26 Nov 2025 12:26:09 +0100 Subject: [PATCH 06/10] update with refined instructions --- explore-analyze/discover/background-search.md | 11 +++++++---- explore-analyze/discover/discover-get-started.md | 10 +++++----- .../discover/discover-search-for-relevance.md | 6 ------ explore-analyze/discover/document-explorer.md | 5 ----- .../discover/run-pattern-analysis-discover.md | 8 +------- explore-analyze/discover/save-open-search.md | 12 +++++------- explore-analyze/discover/show-field-statistics.md | 8 +------- explore-analyze/discover/try-esql.md | 4 ++-- 8 files changed, 21 insertions(+), 43 deletions(-) diff --git a/explore-analyze/discover/background-search.md b/explore-analyze/discover/background-search.md index 8141022ff2..31c10fe274 100644 --- a/explore-analyze/discover/background-search.md +++ b/explore-analyze/discover/background-search.md @@ -12,17 +12,20 @@ description: Send long-running queries to run in the background with background # Run Discover and Dashboards queries in the background [background-search] +Send long-running searches to run asynchronously while you continue working in {{product.kibana}}. Access your completed searches later from **Discover** or **Dashboards**, and manage all background searches from the toolbar. + ::::{important} - Background search replaces Search sessions Background search is a feature introduced in version 9.2. It replaces the deprecated **Search sessions** feature. If you have been using search sessions and upgrade to 9.2, your search sessions aren't lost and become background searches. :::: -Sometimes you might need to search through large amounts of data, no matter how long the search takes. Consider a threat hunting scenario, where you need to search through years of data. +## Requirements [background-search-requirements] -You can send your long-running searches to the background from **Discover** or **Dashboards** and let them run while you continue your work. +To use background searches, you need: -You can access your list of background searches at any time to check their status and manage them from the {icon}`background_task` **Background searches** button in the toolbar. +* **Read** permissions for the **Discover** or **Dashboard** features in {{product.kibana}} +* A {{data-source}} configured with data in {{product.elasticsearch}} ![Send search to background](https://images.contentstack.io/v3/assets/bltefdd0b53724fa2ce/bltee31dcf0d3917c75/68ecf412e5bae49d65a286ff/background-search.gif " =75%") @@ -51,7 +54,7 @@ To send searches to the background, and to view and interact with the list of ba :sync: 91 In versions 9.1 and earlier, this feature is named **Search sessions**. * To save a session, you must have permissions for **Discover** and **Dashboard**, and the [Search sessions subfeature](../../deploy-manage/users-roles/cluster-or-deployment-auth/kibana-privileges.md#kibana-feature-privileges). -* To view and restore a saved session, you must have access to **Stack Management**. +* To view and restore a saved session, you must have access to {{stack-manage-app}}. :::: ::::: diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index 54bebbefed..7cc8dfe0f6 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -11,13 +11,13 @@ description: Step-by-step tutorial for exploring data with Discover by selecting # Explore fields and data with Discover [discover-get-started] -**Discover** provides a flexible interface for exploring your {{product.elasticsearch}} data. Learn how to select and filter data, explore field structures and document content, and present your findings in visualizations. This tutorial walks you through the core workflows for analyzing data in **Discover**, from loading data to creating and saving visualizations. +Learn how to explore your {{product.elasticsearch}} data using **Discover**. This tutorial walks you through selecting {{data-sources}}, filtering documents, analyzing field structures, and creating visualizations from your data. -## Prerequisites +## Prerequisites [discover-get-started-prerequisites] -* Access to {{product.kibana}}. If you don't already have {{product.kibana}}, [start a free trial](https://www.elastic.co/cloud/elasticsearch-service/signup?baymax=docs-body&elektra=docs) on Elastic Cloud. -* Data in {{product.elasticsearch}}. Examples on this page use the [ecommerce sample data set](../index.md#gs-get-data-into-kibana), but you can use your own data. -* Understanding of [{{product.elasticsearch}} documents and indices](../../manage-data/data-store/index-basics.md). +* Access to {{product.kibana}}. If you don't already have {{product.kibana}}, [start a free trial](https://www.elastic.co/cloud/elasticsearch-service/signup?baymax=docs-body&elektra=docs) on {{ecloud}}. +* Data indexed in {{product.elasticsearch}}. Examples use the [ecommerce sample data set](../index.md#gs-get-data-into-kibana), but you can use your own data. +* Basic understanding of [{{product.elasticsearch}} documents and indices](../../manage-data/data-store/index-basics.md). ## Context-aware data exploration [context-aware-discover] diff --git a/explore-analyze/discover/discover-search-for-relevance.md b/explore-analyze/discover/discover-search-for-relevance.md index dcfacc292a..bf82ed963f 100644 --- a/explore-analyze/discover/discover-search-for-relevance.md +++ b/explore-analyze/discover/discover-search-for-relevance.md @@ -13,12 +13,6 @@ description: Sort search results by relevance score in Discover to identify the {{product.elasticsearch}} assigns a relevancy score to each document based on how well it matches your query. Sorting by this score helps you identify the most relevant results quickly. This guide shows how to use **Discover** to sort documents by relevance score, putting the best matches at the top of your results. -## Requirements - -- Access to {{product.kibana}} -- A {{data-source}} with searchable data -- Understanding of basic search queries - This example uses the [sample flights data set](../index.md#gs-get-data-into-kibana), or you can use your own data. 1. In **Discover**, open the {{data-source}} dropdown, and select the data that you want to work with. diff --git a/explore-analyze/discover/document-explorer.md b/explore-analyze/discover/document-explorer.md index f96642ab76..4374f50225 100644 --- a/explore-analyze/discover/document-explorer.md +++ b/explore-analyze/discover/document-explorer.md @@ -13,11 +13,6 @@ description: Customize the Discover view with flexible display options for the d **Discover** offers flexible customization options to optimize your data exploration experience. Adjust the document table layout, modify column arrangements, control chart and sidebar visibility, and configure display density to focus on the data that matters most. These customizations persist across sessions and help you work more efficiently with your {{product.elasticsearch}} data. -## Requirements - -- Access to {{product.kibana}} -- A {{data-source}} with data to explore - :::{tip} Discover provides default [context-aware experiences](/explore-analyze/discover/discover-get-started.md#context-aware-discover) tailored to the type of data that you're exploring, and you can further customize your Discover view on top of them. ::: diff --git a/explore-analyze/discover/run-pattern-analysis-discover.md b/explore-analyze/discover/run-pattern-analysis-discover.md index ddcaece4c4..7995c88b2d 100644 --- a/explore-analyze/discover/run-pattern-analysis-discover.md +++ b/explore-analyze/discover/run-pattern-analysis-discover.md @@ -13,13 +13,7 @@ description: Detect patterns in unstructured data with pattern analysis in Disco Pattern analysis in **Discover** helps you find patterns in unstructured log messages by performing categorization analysis on text fields. It creates categories based on message structures, displays their distribution in a chart, and provides example documents for each pattern. This makes it easier to identify common log patterns, filter out noise, and focus on anomalous messages during troubleshooting. -## Requirements - -- Access to {{product.kibana}} -- A {{data-source}} with log data containing text fields -- Understanding of basic log analysis concepts - -Pattern analysis works on any text field. This example uses the [sample web logs data](../index.md#gs-get-data-into-kibana), or you can use your own data. +Pattern analysis works on any text field. This example uses the [sample web logs data](../index.md#gs-get-data-into-kibana), or you can use your own log data. 1. Go to **Discover**. 2. Expand the {{data-source}} dropdown, and select **Kibana Sample Data Logs**. diff --git a/explore-analyze/discover/save-open-search.md b/explore-analyze/discover/save-open-search.md index 0a146ea1aa..59f8f19a67 100644 --- a/explore-analyze/discover/save-open-search.md +++ b/explore-analyze/discover/save-open-search.md @@ -10,15 +10,13 @@ products: description: Save Discover sessions to reuse searches, queries, and configured views. Add saved searches to dashboards or use them as a foundation for building visualizations. --- -# Discover sessions: Save a search for reuse [save-open-search] +# Save a search for reuse [save-open-search] -Saved Discover sessions preserve your queries, filters, column selections, and view configurations for reuse. Save sessions to return to specific data explorations, share search results with team members, add searches to dashboards, or use them as a foundation for building visualizations. This guide shows how to save, reopen, duplicate, and manage Discover sessions. +Saved **Discover** sessions preserve your queries, filters, column selections, and view configurations for reuse. Save sessions to return to specific data explorations, share search results with team members, add searches to dashboards, or use them as a foundation for building visualizations. This guide shows how to save, reopen, duplicate, and manage Discover sessions. -## Requirements +## Requirements [save-search-requirements] -- Access to {{product.kibana}} -- Permissions to save {{product.kibana}} objects. Refer to [Read-only access](#discover-read-only-access) -- A configured view in **Discover** worth saving +To save searches, you need **Create** and **Edit** permissions for the {{saved-objects-app}} feature in {{product.kibana}}. If you don't have these permissions, the **Save** button won't be visible. For more information, refer to [Read-only access](#discover-read-only-access). ## Read-only access [discover-read-only-access] @@ -26,7 +24,7 @@ Saved Discover sessions preserve your queries, filters, column selections, and v If you don’t have sufficient privileges to save Discover sessions, the following indicator is displayed and the **Save** button is not visible. For more information, refer to [Granting access to {{kib}}](elasticsearch://reference/elasticsearch/roles.md). :::{image} /explore-analyze/images/kibana-read-only-badge.png -:alt: Example of Discover's read only access indicator in Kibana's header +:alt: Example of Discover's read only access indicator in the {{product.kibana}} header :screenshot: ::: diff --git a/explore-analyze/discover/show-field-statistics.md b/explore-analyze/discover/show-field-statistics.md index 9c8467d379..13d2b34569 100644 --- a/explore-analyze/discover/show-field-statistics.md +++ b/explore-analyze/discover/show-field-statistics.md @@ -13,14 +13,8 @@ description: Explore field statistics in Discover to view distributions, top val The **Field statistics** view in **Discover** provides statistical summaries and visualizations of your data fields. View distributions, top values, minimum and maximum ranges, and cardinality to quickly understand your data quality and patterns. Use field statistics to identify data issues, understand field characteristics, and discover insights before building visualizations. -## Requirements - -- Access to {{product.kibana}} -- A {{data-source}} with data to analyze -- **Discover** in default mode (field statistics aren't available in {{esql}} mode) - :::{note} -Field statistics aren't available when **Discover** is in {{esql}} mode. +Field statistics are only available when **Discover** is in default mode, not in {{esql}} mode. ::: This example explores the fields in the [sample web logs data](../index.md#gs-get-data-into-kibana), or you can use your own data. diff --git a/explore-analyze/discover/try-esql.md b/explore-analyze/discover/try-esql.md index 79213e4bed..ea89486382 100644 --- a/explore-analyze/discover/try-esql.md +++ b/explore-analyze/discover/try-esql.md @@ -6,14 +6,14 @@ applies_to: serverless: ga products: - id: kibana -description: Step-by-step tutorial for querying data with ES|QL in Discover using piped commands to filter, transform, and aggregate data with sample data and visualizations. +description: Step-by-step tutorial for querying data with Elasticsearch Query Language (ES|QL) in Discover using piped commands to filter, transform, and aggregate data with sample data and visualizations. --- # Using ES|QL [try-esql] Elasticsearch Query Language ({{esql}}) makes it easier to explore and analyze your {{product.elasticsearch}} data directly in **Discover**. {{esql}} uses a piped syntax where you chain commands together to filter, transform, and aggregate data without needing to switch between different query interfaces. This tutorial walks you through querying sample data with {{esql}}, from basic field selection to complex filtering and visualization. -## Prerequisites +## Prerequisites [try-esql-prerequisites] - Access to {{product.kibana}} - The `enableESQL` setting enabled in **Advanced Settings** (enabled by default) From cf3d25167c8ba99a9321e275bb170d1a3c0d2fe0 Mon Sep 17 00:00:00 2001 From: Florent Le Borgne Date: Wed, 26 Nov 2025 12:39:27 +0100 Subject: [PATCH 07/10] more useful links from intro --- explore-analyze/discover.md | 16 ++++++---------- 1 file changed, 6 insertions(+), 10 deletions(-) diff --git a/explore-analyze/discover.md b/explore-analyze/discover.md index 422f538a29..8d7e45fc7d 100644 --- a/explore-analyze/discover.md +++ b/explore-analyze/discover.md @@ -49,13 +49,9 @@ Once you're familiar with the basics, explore these guides for specific tasks: ## Advanced features -Explore the **Discover** documentation to learn more about the following capabilities: - -* Compare documents side by side -* Add runtime fields to your {{data-source}} -* Work with multiple tabs -* Understand context-aware experiences -* Run queries in the background -* Generate alerts -* Analyze field statistics and patterns -* Search for relevance \ No newline at end of file +The following guides cover additional features you can use in Discover: + +* [Add runtime fields to your {{data-source}}](discover/discover-get-started.md#add-field-in-discover) +* [Run queries in the background](discover/background-search.md) +* [Analyze field statistics and patterns](discover/run-pattern-analysis-discover.md) +* [Search for relevance](discover/discover-search-for-relevance.md) \ No newline at end of file From 2a26e726f85c84e71d07b6f0cb0e0ceb140f9bbb Mon Sep 17 00:00:00 2001 From: Florent Le Borgne Date: Wed, 26 Nov 2025 13:03:14 +0100 Subject: [PATCH 08/10] manual edits --- explore-analyze/discover/background-search.md | 7 ------- explore-analyze/discover/discover-get-started.md | 6 ------ explore-analyze/discover/save-open-search.md | 2 +- explore-analyze/discover/try-esql.md | 5 ++--- 4 files changed, 3 insertions(+), 17 deletions(-) diff --git a/explore-analyze/discover/background-search.md b/explore-analyze/discover/background-search.md index 31c10fe274..d2d755edf3 100644 --- a/explore-analyze/discover/background-search.md +++ b/explore-analyze/discover/background-search.md @@ -20,13 +20,6 @@ Background search is a feature introduced in version 9.2. It replaces the deprec If you have been using search sessions and upgrade to 9.2, your search sessions aren't lost and become background searches. :::: -## Requirements [background-search-requirements] - -To use background searches, you need: - -* **Read** permissions for the **Discover** or **Dashboard** features in {{product.kibana}} -* A {{data-source}} configured with data in {{product.elasticsearch}} - ![Send search to background](https://images.contentstack.io/v3/assets/bltefdd0b53724fa2ce/bltee31dcf0d3917c75/68ecf412e5bae49d65a286ff/background-search.gif " =75%") diff --git a/explore-analyze/discover/discover-get-started.md b/explore-analyze/discover/discover-get-started.md index 7cc8dfe0f6..369504ab52 100644 --- a/explore-analyze/discover/discover-get-started.md +++ b/explore-analyze/discover/discover-get-started.md @@ -13,12 +13,6 @@ description: Step-by-step tutorial for exploring data with Discover by selecting Learn how to explore your {{product.elasticsearch}} data using **Discover**. This tutorial walks you through selecting {{data-sources}}, filtering documents, analyzing field structures, and creating visualizations from your data. -## Prerequisites [discover-get-started-prerequisites] - -* Access to {{product.kibana}}. If you don't already have {{product.kibana}}, [start a free trial](https://www.elastic.co/cloud/elasticsearch-service/signup?baymax=docs-body&elektra=docs) on {{ecloud}}. -* Data indexed in {{product.elasticsearch}}. Examples use the [ecommerce sample data set](../index.md#gs-get-data-into-kibana), but you can use your own data. -* Basic understanding of [{{product.elasticsearch}} documents and indices](../../manage-data/data-store/index-basics.md). - ## Context-aware data exploration [context-aware-discover] **Discover** provides tailored interfaces and features for the following data types when accessed from Observability or Security project types or {{kib}} solution views: diff --git a/explore-analyze/discover/save-open-search.md b/explore-analyze/discover/save-open-search.md index 59f8f19a67..4bd5462ccf 100644 --- a/explore-analyze/discover/save-open-search.md +++ b/explore-analyze/discover/save-open-search.md @@ -19,7 +19,7 @@ Saved **Discover** sessions preserve your queries, filters, column selections, a To save searches, you need **Create** and **Edit** permissions for the {{saved-objects-app}} feature in {{product.kibana}}. If you don't have these permissions, the **Save** button won't be visible. For more information, refer to [Read-only access](#discover-read-only-access). -## Read-only access [discover-read-only-access] +### Read-only access [discover-read-only-access] If you don’t have sufficient privileges to save Discover sessions, the following indicator is displayed and the **Save** button is not visible. For more information, refer to [Granting access to {{kib}}](elasticsearch://reference/elasticsearch/roles.md). diff --git a/explore-analyze/discover/try-esql.md b/explore-analyze/discover/try-esql.md index ea89486382..a00e4f1542 100644 --- a/explore-analyze/discover/try-esql.md +++ b/explore-analyze/discover/try-esql.md @@ -17,9 +17,8 @@ Elasticsearch Query Language ({{esql}}) makes it easier to explore and analyze y - Access to {{product.kibana}} - The `enableESQL` setting enabled in **Advanced Settings** (enabled by default) -- Sample data installed (optional but recommended for following examples) - -The examples on this page use the {{product.kibana}} sample web logs to explore data and create visualizations. You can install sample data by following [Add sample data](../index.md#gs-get-data-into-kibana). +- Have data in {{product.elasticsearch}}. + The examples on this page use the {{product.kibana}} sample web logs to explore data and create visualizations. You can install sample data by following [Add sample data](../index.md#gs-get-data-into-kibana). ::::{tip} For the complete {{esql}} documentation, including all supported commands, functions, and operators, refer to the [{{esql}} reference](elasticsearch://reference/query-languages/esql/esql-syntax-reference.md). For a more detailed overview of {{esql}} in {{product.kibana}}, refer to [Use {{esql}} in Kibana](../query-filter/languages/esql-kibana.md). From bd6d2d64a369eb8d13f19c363faac3bfe62325a7 Mon Sep 17 00:00:00 2001 From: florent-leborgne Date: Thu, 27 Nov 2025 17:49:55 +0100 Subject: [PATCH 09/10] Update explore-analyze/discover/try-esql.md --- explore-analyze/discover/try-esql.md | 1 - 1 file changed, 1 deletion(-) diff --git a/explore-analyze/discover/try-esql.md b/explore-analyze/discover/try-esql.md index a00e4f1542..f6921dd149 100644 --- a/explore-analyze/discover/try-esql.md +++ b/explore-analyze/discover/try-esql.md @@ -15,7 +15,6 @@ Elasticsearch Query Language ({{esql}}) makes it easier to explore and analyze y ## Prerequisites [try-esql-prerequisites] -- Access to {{product.kibana}} - The `enableESQL` setting enabled in **Advanced Settings** (enabled by default) - Have data in {{product.elasticsearch}}. The examples on this page use the {{product.kibana}} sample web logs to explore data and create visualizations. You can install sample data by following [Add sample data](../index.md#gs-get-data-into-kibana). From 73f545948578e6044f70a727a2d8df86001f4a01 Mon Sep 17 00:00:00 2001 From: florent-leborgne Date: Thu, 27 Nov 2025 17:52:35 +0100 Subject: [PATCH 10/10] Update explore-analyze/discover/try-esql.md --- explore-analyze/discover/try-esql.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/explore-analyze/discover/try-esql.md b/explore-analyze/discover/try-esql.md index f6921dd149..2b37f27901 100644 --- a/explore-analyze/discover/try-esql.md +++ b/explore-analyze/discover/try-esql.md @@ -11,7 +11,7 @@ description: Step-by-step tutorial for querying data with Elasticsearch Query La # Using ES|QL [try-esql] -Elasticsearch Query Language ({{esql}}) makes it easier to explore and analyze your {{product.elasticsearch}} data directly in **Discover**. {{esql}} uses a piped syntax where you chain commands together to filter, transform, and aggregate data without needing to switch between different query interfaces. This tutorial walks you through querying sample data with {{esql}}, from basic field selection to complex filtering and visualization. +Elasticsearch Query Language ({{esql}}) helps you explore and analyze your {{product.elasticsearch}} data directly in **Discover**, without a [data view](discover-get-started.md#find-the-data-you-want-to-use). {{esql}} uses a piped syntax where you chain commands together to filter, transform, and aggregate data without needing to switch between different query interfaces. This tutorial walks you through querying sample data with {{esql}}, from basic field selection to complex filtering and visualization. ## Prerequisites [try-esql-prerequisites]