# How to analyze data in ES？

**URL:** <https://discuss.elastic.co/t/how-to-analyze-data-in-es/309719>\
**Category:** Elasticsearch\
**Created:** [July 15, 2022, 8:11am UTC](https://discuss.elastic.co/t/how-to-analyze-data-in-es/309719 "2022-07-15T08:11:22Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![wentao\_Xiong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wentao_xiong/32/108340_2.png) [@wentao\_Xiong](https://discuss.elastic.co/u/wentao_Xiong)\
**Post date:** [July 15, 2022, 8:11am UTC](https://discuss.elastic.co/t/how-to-analyze-data-in-es/309719/1 "2022-07-15T08:11:22Z")

</div>

Environment Description:  
Rocky Linux 8  
JDK 1.8  
elasticsearch-7.17.5, logstash-7.17.5, kibana-7.17.5, filebeat-7.17.5

Statement of needs:  
The log data has been collected into ELK, and now it is necessary to analyze the specific message, such as the number of times the method occurs, to facilitate the developer to track the problem.  
I need the Key : Value is method : occurred\_times  
And it would be better if the result could be displayed in Kibana.

As shown in the example,

 ![微信图片_20220715160815](https://us1.discourse-cdn.com/elastic/original/3X/8/f/8fa0ea6551caa17605bd42504636f166bee06c8c.png)

The Key : Value is  
[func/tlog\_helper.cpp:136:GetSvrPlatID()] : 3  
[scene/gameaccount.cpp:10220:GetBelongAreaType()] : 1

Question:

1. How to implement the above requirements?
2. Are there any tutorials or articles available?

This is the first time to ask a question. If there are any deficiencies, please give feedback and hope to get an answer, thank you!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 12, 2022, 8:11am UTC](https://discuss.elastic.co/t/how-to-analyze-data-in-es/309719/2 "2022-08-12T08:11:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
