Kibana+x-pack

Kibana is a WEB interface that provides data analysis for ElasticSearch. It can be used to efficiently search, visualize and analyze logs. Kibana the latest version of 5.0.2, review the Kibana 3 and Kibana 4 interface.

The following figure shows the Kibana 3 interface, where all dashboards are placed directly on the homepage.

The following figure shows the interface of Kibana 4, and Kibana 3 The biggest difference is that the original body is divided into three parts, namely, the Discovery page, visualization, instrument panel.

Below is the current Kibana 5 latest version of the interface. Compared to Kibana 4, in addition to the stylistic changes in the interface, the main feature bar is the addition of timeline, management, and dev tools options.

Discover

You can interactively explore your data from the Discover page. You have access to every document in every index that matches the selected index pattern. You can submit search queries, filter the search results, and view document data. You can also see the number of documents that match the search query and get field value statistics. If A Time field is configured for the selected index pattern, the distribution of documents over time was displayed in a hi Stogram at the top of the page.

From the discovery page, you can interactively explore the data for ES. Each document in each index that matches the selected index pattern can be accessed. You can submit search queries, filter search results, and view document data. You can also see the number of documents that match the search query and get the field value statistics. If a time field is configured for the selected index mode, the distribution of the document appears in the histogram at the top of the page over time.

Visualize

Visualize enables you to create visualizations of the data in your Elasticsearch indices. You can then build dashboards that display related visualizations. Kibana visualizations is based on Elasticsearch queries. By using a-series of Elasticsearch aggregations to extract and process your data, you can create charts this show you the Trends, spikes, and dips you need to know about. You can create visualizations from a search saved from Discover or start with a new search query.

Visualization allows you to create visualizations of your Elasticsearch indicator data. Then you can build dashboards to display related visualizations. The visualization of Kibana is based on the Elasticsearch query. By extracting and processing your data through a series of elasticsearch aggregations, you can create charts that show what you need to know about trends, peaks, and dips. You can create visualizations from search-saved searches or start with a new search query.

Dashboard

A Kibana dashboard displays a collection of saved visualizations. You can arrange and resize the visualizations as needed and save dashboards so they be reloaded and GKFX.

A dashboard displays a series of visualizations saved by Kibana. You can arrange and adjust visualizations as needed, and save dashboards that can be loaded and shared.

Monitoring

You can see that the default Kibana is not available for this option. In fact, monitoring is provided by X-pack integration.

The X-pack monitoring components enable your to easily monitor Elasticsearch through Kibana. You can view cluster health and performance in real time as well as analyze past cluster, index, and node metrics. In addition, you can monitor the performance of Kibana itself. When you install the X-pack on your cluster, the A monitoring agent runs on each node to collect and the index metrics from Elasticsea Rch. With X-pack installed in Kibana, you can then view the monitoring data through a set of specialized dashboards.

The X-pack monitoring component allows you to easily monitor elasticsearch through Kibana. You can view the health and performance of your cluster in real time, as well as analyze past clusters, indexes, and node metrics. In addition, you can monitor the performance of the Kibana itself. When you install X-pack on a cluster, the monitoring agent runs on each node to collect and index metrics from Elasticsearch. Installed on the x-pack on Kibana, you can view the data through a set of specialized dashboards.

We can review the installation process: ElasticSearch 5 Learning-Install ElasticSearch, Kibana and X-pack, can be found in the X-pack root directory and ElasticSearch root directory, respectively, when installing Kibana.

Graph

The X-pack graph capabilities enable you to discover what items in an Elasticsearch index is related. You can explore the connections between indexed terms and see which connections is the most meaningful. This can is useful in a variety of applications, from fraud detection to recommendation engines. For example, graph exploration could help you uncover website vulnerabilities that hackers is targeting so can harden Your website. Or, you might provide graph-based personalized recommendations to your E-commerce customers. X-pack provides a simple, yet powerful graph exploration APIs, and an interactive graph visualization tool for Kibana. Both work with out of the box with existing Elasticsearch indices-you don ' t need to store any additional data to use the X -pack graph features.

The ability of the X-pack graph allows you to discover how an Elasticsearch index entry is associated. You can explore the links between the index terms to see which connections are most meaningful. This is useful in a variety of applications, from fraud detection to recommendation engines, for example, the exploration of diagrams can help you find bugs in the target of hackers on the site, so you can harden your site. Or, you can provide personalized, chart-based recommendations for your ecommerce customers. X-pack provides a simple but powerful graphical development API, and Kibana interactive graphical visualizer. Using X-pack charts There are features that work with overhead with existing elasticsearch indicators you do not need any additional data storage.

Timelion

Timelion is a time series data visualizer This enables you to combine totally independent data sources within a single Vis Ualization. It's driven by a simple expression language your use of retrieve time series data, perform calculations to tease out of the An Swers to complex questions, and visualize the results.

Timelion is a time series data visualization that can be combined in a single visualization completely independent of the data source. It is driven by a simple expression language that you use to retrieve time series data, perform calculations, find answers to complex questions, and visualize the results.

This function consists of a series of function functions, the same query results can also be viewed through the dashboard display.

Management

The Management application is where you perform your runtime configuration of Kibana, including both the initial setup and Ongoing configuration of index patterns, advanced settings that tweak the behaviors of Kibana itself, and the various "OB Jects "that can save throughout Kibana such as searches, visualizations, and dashboards. This section is pluginable, so's addition to the out of the box capabitilies, packs such as x-pack can add additional man Agement capabilities to Kibana.

The application in management is when you perform your run-time configuration Kibana, including initial settings and metrics to configure the mode, advanced settings, adjust your own behavior and Kibana, various "objects", you can view the contents of the entire Kibana such as discovery pages, visualizations and dashboards.
This part is pluginable, in addition, X-pack can give Kibana additional management ability.

can use X-pack Security to control what Elasticsearch data users can access through Kibana.when you install X-pack, Ki Bana users has to log in. They need to has the Kibana_user role as well as access to the indices they would be working with in kibana.if a user load S a Kibana dashboard that accesses data in an index that they is not authorized to view they get an error that indicates The index does not exist. X-pack Security does not currently provide a-to control which users can load which dashboards.

You can use X-pack security to control which users can access elasticsearch data through Kibana. When you install the X-pack,kibana user log on. They need to have a kibana_user effect and get the indicators that they will work in Kibana. If the user loads the Kibana dashboard and accesses an index of data that they are not authorized to view, they get an error indicating that the exponent does not exist. X-pack Security currently does not provide a way to control which users can load the dashboards.

Dev Tools

The original interactive console sense makes it easy for users to interact directly with Elasticsearch through a browser. Renamed from Kibana 5 and built directly on the Kibana, is the dev tools option.

Note If the Kibana is above 5, you cannot install sense with the following command. (Step over the pit)

--install elastic/sense

Or

install elastic/sense instead

Summarize

The content is relatively simple, mainly to the Kibana tool's overall function summary, facilitates next to the Elasticsearch 5 study, in which X-pack mainly is the authentication which adds the identity permission, as well as originally needs to install other various Marvel, Features such as hand are added to the Kibana for use by various feature plugins.

Learning Links:

X-pack:https://www.elastic.co/guide/en/x-pack/current/xpack-introduction.html

Kibana:https://www.elastic.co/guide/en/kibana/current/introduction.html

Tags: Elasticsearch

Kibana+x-pack