This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
« Save a search for reuse Run a pattern analysis on your log data »
Elastic Docs ›Kibana Guide [8.16] ›Discover

View field statistics

edit

View field statistics

edit

Explore the fields in your data with the Field statistics view in Discover and answer such questions as:

  • What does the latency look like when one of the containers is down on a Sunday?
  • Is the field type and format in the data view appropriate for the data and its cardinality?

This example explores the fields in the sample web logs data, or you can use your own data.

  1. Go to Discover.
  2. Expand the data view dropdown, and select Kibana Sample Data Logs.
  3. If you don’t see any results, expand the time range, for example, to Last 7 days.

  4. Click Field statistics.

    The table summarizes how many documents in the sample contain each field for the selected time period the number of distinct values, and the distribution.

    Field statistics view in Discover showing a summary of document data.

  5. Expand the hour_of_day field.

    For numeric fields, Discover provides the document statistics, minimum, median, and maximum values, a list of top values, and a distribution chart. Use this chart to get a better idea of how the values in the data are clustered.

    Field statistics for a numeric field.

  6. Expand the geo.coordinates field.

    For geo fields, Discover provides the document statistics, examples, and a map of the coordinates.

    Field statistics for a geo field.
  7. Explore additional field types to see the statistics that Discover provides.
  8. To create a visualization of the field data, click Click the magnifying glass icon to create a visualization of the data in Lens or Click the Maps icon to explore the data in a map in the Actions column.
« Save a search for reuse Run a pattern analysis on your log data »