How to take filter and selected timeframe from Visualize to Logs view?

bluepuma77 · December 23, 2020, 10:29am

Hi all,

I have identified an anomaly (strange user behavior) in my logs with Visualize in Kibana.

How can I now switch to log view to see the same matching log entries and details?

Take the filter and selected timeframe over to logs - potentially with a simple click?

Thanks
bluepuma

afharo · December 23, 2020, 4:00pm

What version of the Stack are your running? On 7.10, you can find the option "Explore underlying data" when looking at a visualization inside a Dashboard.

That option takes you to Discover with the same filters applied.

bhavyarm · December 23, 2020, 4:46pm

Hello,

yes. All you need to do is pin the filter and the results in discover will also be filtered on that filter.

Thanks
Bhavya

bhavyarm · December 23, 2020, 4:48pm

Right - now you have two ways of solving this. Thanks @afharo

Bhavya

bluepuma77 · December 27, 2020, 1:15pm

Thanks, so I need to upgrade my v7.9.3

bluepuma77 · January 14, 2021, 2:45pm

Here I am again, looking for a way to view logs from visualize.

I would love to just click on one of the yellow-ish bars and show the matching logs.

Is that possible? Can and/or should I create a feature request?

afharo · January 20, 2021, 11:22am

Hi @bluepuma77,

I think our previous answers still apply here:

You can follow @bhavyarm's reply: setting the filter, pinning it and moving to discover.
Or you can use the "Explore underlying data" option (only available in dashboards at the moment).

AFAIK, there are works to bring that second option to visualizations as well.