Is it possible to create interactive forms in Kibana Dashboard? For example where a user can enter something and that is fed to a search query. I know it is relatively easy to create this in Splunk. Right now, the only interactive chart I could find in Kibana is the Table.
Could you post a screenshot of what you have in mind from Splunk? In general, all dashboards are interactive - you can click on any part of visualization to filter it by things like terms, and a search in the top search bar will filter the whole dashboards by adhoc keywords.
You can save a discovery which simply finds everything (*) and insert it into the dashboard. You can then filter this discovery by either using the visualizations, the search bar or by changing the timeframe. You can modify the discovery to only show columns you're interested in but you can always open one row to see all details.
When you click 'Add visualisation' you get two tabs at the top, 'Visualisations' and 'Searches'. Click on 'Searches' and select a saved search instead of a visualisation.
To answer your question directly, Kibana does not have input controls you can explicitly add to your dashboard. We are tracking this request here and think it would be a good addition to Kibana: https://github.com/elastic/kibana/issues/6884
Today, our users accomplish similar functionality in a couple of ways:
As suggested by @jaminvp and others, you can click on any part of a visualization on the dashboard to filter it by that item (pie slice, bar in bar chart, etc..) Instead of drilling down into raw results, we reserve that click for interactive filtering.
To make the clicking behavior a bit more discoverable some place a dedicated table with terms they need to filter on the dashboard and add a markdown widget with instructions that tells users to click on the cells of the table.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.