Skip to content

Kibana exercises

Create a Visualisation based on a search in Discover

Section titled “Create a Visualisation based on a search in Discover”

Useful for:

  • analyzing which method runs the most often

Get the number of requests sent from every ip address

Section titled “Get the number of requests sent from every ip address”

Useful for:

  • searching for DoS type of behavior

answer:

  • Visualization
  • data table
  • metric: count
  • buckets: split rows -> Terms -> json.remote_ip.keyword (keyword because you want to use an Elastic field that hasn’t been split into separate tokens)