Using Kibana, you can visualize geospatial data in a multitude of ways. Sort, filter, aggregate, and plot your data as vectors, grids, regions, or point-to-point map visualizations. In this hands-on lab, we will seek out geographical insights within our data as we create map visualizations in Kibana.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Create and Save the Airports Visualization
- Log into the Kibana instance.
- Create a new map visualization.
- Add a vector map layer with the flights index pattern and DestLocation geospatial field labeled as Flights.
- Configure the Flights layer tooltip to show the fields DestCountry, DestCityName, and DestAirportID.
- Configure the Flights layer to show the top hits per DestAirportID and only show one document per value.
- Configure the Flights layer’s symbol type to the airport icon.
- Create and Save the Web Traffic Visualization
- Add a grid map layer as a heat map with the logs index pattern and geo.coordinates geospatial field labeled as Traffic.
- Calculate the count of requests and label it as Requests on the Traffic layer.
- Configure the Traffic layer grid resolution as fine.
- Create and Save the Global Sales Visualization
- Create a new map visualization.
- Add a world countries EMS boundaries layer and label it as Countries.
- Configure the Countries layer tooltip to show the field name.
- Add a term join to the Countries layer with left source World Countries, left field ISO 3166-1 alpha-2 code, right source ecommerce, and right field geoip.country_iso_code.
- Configure the term join on the Countries layer to calculate the sum of products.price, label it as Sales, and display it as a dollar amount with 2 decimal places (example: 1,234.567 as $1,234.56).
- Configure the Countries layer’s fill color to green scaled by the value of Sales.
- Configure the Countries layer’s border color to black.
- Save the visualization as Global Sales.
- Create and Save the ES-Air Flights Visualization
- Create a new map visualization.
- Add a point-to-point layer with the flights index pattern, OriginLocation source field, DestLocation destination field, and label it as Flights.
- Calculate the average of FlightDelayMin and label it as "Delayed Minutes" for the Flights layer.
- Filter the Flights layer to only show flights with the Carrier of ES-Air.
- Configure the Flights layer’s border color to scale from green to red based off the Delayed Minutes value.
- Configure the Flights layer’s border width to scale based off the Delayed Minutes value.
- Save the visualization as ES-Air Flights.