This can be visualized easily using a variety of charts. Let's use Tag Cloud.
The steps are as follows:
- Create a new visualization
- Click on New and select Tag Cloud
- Select logstash-* under From a New Search, Select Index
- Set the bucket type to Tags
- Select the Terms aggregation
- Select the useragent.name.keyword field
- Set the Size to 10 and click the Play (Apply Changes) button:
Save the visualization as Most used user agent. Chrome, followed by Firefox, is the user agent the majority of traffic is originating from.