- Access Kibana user interface with browser: http://ip-address:5601/
- On discover tab construct some search with results
- For the visualization, we will need a combination of numeric, date-time, and string data types
- Save the search definitions to reuse in the Visualization
- Switch to Visualize tab
- Select Data Table
- Select saved search or start over with a new search
- Select metrics e.g. count
- Select aggregation e.g. terms for
clientip.keyword - Experiment with different options
- Save your definitions as we will need to come back to them later