Kibana Data Visualization
- Shirly Tsang
Analytics
Kibana offers many ways of charting data. Let’s build a pie chart based on the field tclass.
Click the menu
icon in the topbar. Select Dashboard.
Click Create new dashboard. We’ll add the chart to this dashboard. Many objects, such as charts, maps, and saved searches, can live on a dashboard for convenient access and visualization.
Click Create visualization.
Select Pie as the type.
Select the data view csp-security-events.
Drag the result.tclass.keyword field in the left column to the center. This will automatically:
Slice by result.tclass.keyword.
Size by Count of records.
Narrow or expand your dataset with the calendar in the upper right corner as desired.
Your chart should look something like below. Click Save and return.
Your chart now appears on your dashboard. Click the gears
options icon.
You can perform several actions here. Click Edit panel title to give the panel a name, such as Top Threat Classes.
Click Inspect to see a breakdown of data for the chart.
You can even download most charts as a CSV.
Click Save at the top of the dashboard.
You can add many different objects to dashboards, connect them, move them around, filter fields, and much more. Here are some examples showcasing more of Kibana’s visualization capabilities:
