The Visualize page helps to create visualizations in the form of graphs, tables, and charts, thus assisting in visualizing all the data that has been stored in Elasticsearch easily. By creating visualizations, the user can easily make sense of data and can obtain answers to the questions they might have formed during the data discovery process. These built visualizations can be used when building dashboards.

For our Apache access log analysis use case, the user can easily find out answers to some of the typical questions raised in log analysis, such as the following:

• What's the traffic in different regions of the world?
• What are the top URLs requested?
• What are the top IP addresses making requests?
• How's the bandwidth usage over time?
• Is there any suspicious or malicious activity from any region/IP address?

All visualizations in Kibana are based on the aggregation queries of Elasticsearch. Aggregations provide the multi-dimensional grouping of results—for example, finding the top user agents by device and by country. Kibana provides a variety of visualizations, shown as follows: