Elastic (ELK)
Kibana — Discover, Visualize & Query
Explore, visualize, and build dashboards over Elasticsearch data.
Kibana is the visualization and exploration front end for the Elastic Stack. Discover lets you search raw documents interactively — pick a data view (index pattern), filter with KQL (Kibana Query Language), and inspect fields and their values, which is the everyday tool for log triage. From there, Lens and the visualization editors build charts, and dashboards combine them with shared filters and time pickers.
The dashboard and steering wheel of a car whose engine is Elasticsearch: you do not touch the engine directly — you drive, watch the gauges, and navigate from the cabin.
Key Concepts
1
Kibana is also the control plane for much of Elastic: it hosts the Observability and Security (SIEM) apps, manages Elastic Agent through Fleet, configures index lifecycle and alerting rules, and exposes Dev Tools for raw query DSL. Newer query options include ES|QL, a piped query language that brings a Splunk-SPL-like compute-and-aggregate experience to Elasticsearch. For interviews, the key idea is that Kibana is where humans search, visualize, and operate the stack — Elasticsearch does the work underneath.