4.2: Tables

Objective:

In this lab, you will learn about building tables using Lens. You will understand the difference between rows, columns, and metrics. You will learn how to create a summary row and set conditional coloring rules for cells.

  1. Open the Logs Overview dashboard.

    • Make sure to view the Last 7 days of data.
    • Click the Edit button. Note: If the dashboard is already in Edit mode, you'll see a Save button instead.

  2. Click Create visualization. This will open the Lens editor by default.

  3. Let's create a table to show the top hosts being accessed most frequently showing host name, count of records and median of bytes. Click on Create visualization and configure it as follow:

    • Visualization type: Table
    • Rows: host.keyword field
    • Metrics: Count records and Median of bytes "Dashboard View"

  4. Change the titles of the columns to be Host, Count and Bytes respectively. Recall that you can change the titles by updating the Name for each field in the Layer pane settings. "Column Name"

  5. For the Bytes column, let's also change the Value format to use Bytes (1024). "Table with updates"

  6. It's possible to conditionally color cells based on their value. Close the side panel, and click Count. Set Color by value to Cell. "Cell color by value"

  7. Click Edit next to Color and change the color palette from Positive to Temperature. "Table with colors"

  8. Close the side panel, and click Bytes. Set Summary Row to Average. "Table with summary"

  9. Click Save and return to add the table to your dashboard.

  10. Now, click [No Title] and name your table visualization as Top hosts. Click Save to save your table visualization name. "Table visualization name"

  11. Finally, click Save to save your changes to the dashboard.

Summary:

In this lab, you have learned how to use Lens to create table visualizations.