From c72cf75a0e4465e42ecc66194d1f3100e1760768 Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Thu, 5 Sep 2024 09:31:23 -0600 Subject: [PATCH 01/22] Update Discover content for 2.0 features Signed-off-by: Melissa Vagi --- _dashboards/discover/index-discover.md | 16 ++++------------ 1 file changed, 4 insertions(+), 12 deletions(-) diff --git a/_dashboards/discover/index-discover.md b/_dashboards/discover/index-discover.md index 4e32c4f1857..25bbb32294e 100644 --- a/_dashboards/discover/index-discover.md +++ b/_dashboards/discover/index-discover.md @@ -9,23 +9,19 @@ redirect_from: # Analyzing data -To analyze your data in OpenSearch and visualize key metrics, you can use the **Discover** application in OpenSearch Dashboards. An example of data analysis in **Discover** is shown in the following image. - -A Discover default page - -## Getting started - -In this tutorial, you'll learn about using **Discover** to: +Analyze your data in OpenSearch and visualize key metrics using the **Discover** application in OpenSearch Dashboards. In this tutorial, you'll learn about using **Discover** to: - Add data. - Interpret and visualize data. - Share data findings. - Set alerts. +## Getting started + Before getting started, make sure you: - Install [OpenSearch Dashboards](https://opensearch.org/downloads.html). -- Add sample data or import your own data into OpenSearch. Go to the [OpenSearch Dashboards quickstart guide]({{site.url}}{{site.baseurl}}/dashboards/quickstart/) to learn about adding sample datasets. Go to [Managing indexes]({{site.url}}{{site.baseurl}}/im-plugin/index/) to learn about importing your own data. +- Add sample data or import your own data into OpenSearch. See [OpenSearch Dashboards quickstart guide]({{site.url}}{{site.baseurl}}/dashboards/quickstart/) to learn about adding sample datasets or [Managing indexes]({{site.url}}{{site.baseurl}}/im-plugin/index/) to learn about importing your own data. - Have a foundational understanding of [OpenSearch documents and indexes]({{site.url}}{{site.baseurl}}/im-plugin/index/). ## Defining the search @@ -36,10 +32,6 @@ To define a search, follow these steps: 2. Choose the data you want to work with. In this case, choose `opensearch_dashboards_sample_data_flights` from the upper-left dropdown menu. 3. Select the {::nomarkdown}calendar icon{:/} icon to change the time range of your search and then select **Refresh**. -The resulting view is shown in the following image. - -Discover interface showing search of flight sample data for Last 7 days - ## Analyzing document tables In OpenSearch, a document table stores unstructured data. In a document table, each row represents a single document, and each column contains document attributes. From 6f8f1d0576cdc7ea16f13a4bf711e1731e8a87a5 Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Mon, 16 Sep 2024 12:56:34 -0600 Subject: [PATCH 02/22] Update index.md, add enhancements, move text to new page Signed-off-by: Melissa Vagi --- .../discover/defining-analyzing-searches.md | 73 ++++++++++++++ .../discover/exploring-query-enhancements.md | 73 ++++++++++++++ _dashboards/discover/index-discover.md | 92 ++---------------- _dashboards/discover/time-filter.md | 2 +- images/dashboards/query-assist.png | Bin 0 -> 10799 bytes 5 files changed, 153 insertions(+), 87 deletions(-) create mode 100644 _dashboards/discover/defining-analyzing-searches.md create mode 100644 _dashboards/discover/exploring-query-enhancements.md create mode 100644 images/dashboards/query-assist.png diff --git a/_dashboards/discover/defining-analyzing-searches.md b/_dashboards/discover/defining-analyzing-searches.md new file mode 100644 index 00000000000..95151836d3f --- /dev/null +++ b/_dashboards/discover/defining-analyzing-searches.md @@ -0,0 +1,73 @@ +--- +layout: default +title: Defining and analyzing searches +parent: Analyzing data +nav_order: 10 +--- + +# Defining and analyzing searches + +Discovering and exploring data in OpenSearch Dashboards is a powerful way to gain insights from your data. The Discover application within OpenSearch Dashboards provides a flexible interface for defining and analyzing searches across your data. + +## Defining a search + +To define a search, follow these steps: + +1. On the OpenSearch Dashboards navigation menu, select **Discover**. +2. Choose the data you want to work with. In this case, choose `opensearch_dashboards_sample_data_flights` from the upper-left dropdown menu. +3. Select the {::nomarkdown}calendar icon{:/} icon to change the time range of your search and then select **Refresh**. + +## Analyzing document tables + +In OpenSearch, a document table stores unstructured data. In a document table, each row represents a single document, and each column contains document attributes. + +### View document attributes + +To review document attributes, follow these steps: + +1. From the data table's left column, choose the {::nomarkdown}inspect icon{:/} icon to open the **Document Details** window. Select the {::nomarkdown}minimize icon{:/} icon to close the **Document Details** window. +2. Examine the metadata. You can switch between the **Table** and **JSON** tabs to view the data in your preferred format. +3. Select **View surrounding documents** to view data for other log entries either preceding or following your current document or select **View single document** to view a particular log entry. + +### Add or delete fields in document tables + +To add or delete fields in a document table, follow these steps: + +1. View the data fields listed under **Available fields** and select the {::nomarkdown}plus icon{:/} icon to add the desired fields to the document table. The field will be automatically added to both **Selected fields** and the document table. For this example, choose the fields `Carrier`, `AvgTicketPrice`, and `Dest`. +2. Select **Sort fields** > **Pick fields to sort by**. Drag and drop the chosen fields in the desired sort order. + +## Searching data + +You can use the search toolbar to enter a [DQL]({{site.url}}{{site.baseurl}}/dashboards/discover/dql/) or [query string]({{site.url}}{{site.baseurl}}/query-dsl/full-text/query-string/) query. The search toolbar is best for basic queries; for full query and filter capability, use [query domain-specific language (DSL)]({{site.url}}{{site.baseurl}}/query-dsl/index/) in the [Dev Tools console]({{site.url}}{{site.baseurl}}/dashboards/dev-tools/index-dev/). + +For more information, see [Discover and Dashboard search toolbar]({{site.url}}{{site.baseurl}}/dashboards/index/#discover-and-dashboard-search-bar). + +## Filtering data + +Filters allow you to narrow the results of a query by specifying certain criteria. You can filter by field, value, or range. The **Add filter** pop-up suggests the available fields and operators. + +To filter your data, follow these steps: + +1. Under the DQL search bar, choose **Add filter**. +2. Select the desired options from the **Field**, **Operator**, and **Value** dropdown lists. For example, select `Cancelled`, `is`, and `true`. +3. Choose **Save**. +4. To remove a filter, choose the {::nomarkdown}cross icon{:/} icon to the right of the filter name. + +## Saving a search + +To save your search, including the query text, filters, and current data view, follow these steps: + +1. Select **Save** on the upper-right toolbar. +2. Add a title, and then choose **Save**. +3. Select **Open** on the upper-right toolbar to access your saved searches. + +## Visualizing data findings + +To visualize your data findings, follow these steps: + +1. Select the {::nomarkdown}inspect icon{:/} icon to the right of the field you want to visualize. +2. Select the **Visualize** button. When the **Visualize** application is launched, a visualization appears. + +## Setting alerts + +Set alerts to notify you when your data exceeds your specified thresholds. Go to [Alerting dashboards and visualizations]({{site.url}}{{site.baseurl}}/observing-your-data/alerting/dashboards-alerting/) to learn about creating and managing alerts. diff --git a/_dashboards/discover/exploring-query-enhancements.md b/_dashboards/discover/exploring-query-enhancements.md new file mode 100644 index 00000000000..943f2bf19eb --- /dev/null +++ b/_dashboards/discover/exploring-query-enhancements.md @@ -0,0 +1,73 @@ +--- +layout: default +title: Exploring query enhancements +parent: Analyzing data +nav_order: 20 +--- + +# Exploring query enhancements +Introduced 2.17 +{: .label .label-purple } + +Starting with OpenSearch 2.17, query enhancements have been made. These enhancements are experimental and may be subject to change or instability. Enhancements include the following: + +- Query languages PPL and SQL, with **Query Assist** for PPL +- Multiline query editor for PPL and SQL and autocomplete for PPL and DQL +- Data selector with **Data Explorer** that supports index patterns, indexes, and Amazon S3 connections and data configuration that supports selecting the appropriate query language based on the data type +- Link sharing through URLs without needing write permission to create an index pattern + +All existing functionality remains in OpenSearch 2.17, and the new features are designed to improve your data exploration experience. The **Enable query enhancements** is currently not on a minimum distribution. . You can leave your feedback at to help the OpenSearch Project improve. +{: .note} + +## Enabling query enhancements + +To enable the query enhancements through OpenSearch Dashboards, follow these steps: + +1. Go to **Dashboards Management** > **Advanced settings** > **Search** and toggle on **Enable query enhancements**. Tip: You can select the **Search** pane from the **Category** dropdown menu in the upper-right search bar. +2. Select the **Save** button to save your changes. +3. Reload the page as prompted in the pop-up message. + +Alternatively, you can override the setting on startup by running the following command: + +``` +./bin/opensearch-dashboards --uiSettings.overrides['query:enhancements:enabled']=true +``` +{% include copy-curl.html %} + +## Using the experimental features + +The following tutorials guide you through some of the experimental features and capabilities. + +### Query language enhancements + +You can now use PPL in **Discover**. Follow these steps to try out the feature: + +1. Go to **Discover** and select **PPL** from the query language dropdown menu in the upper-right search bar. You should see a dashboard containing the query editor, histogram, and data table panes. +2. Select a sample dataset. For this example, select `opensearch_dashboards_sample_data_ecommerce` from the data source dropdown menu above the query editor and adjust the time filter to **Last 1 year**. +3. Enter the following example PPL query: + +```json +source = opensearch_dashboards_sample_data_logs +| where tags = "success" +| where geo.dest = "US" +``` +{% include copy-curl.html %} + +4. View the resulting output that shows the number of successful log entries originating from the United States. You should see an updated histogram and data table following the query editor. +5. Select the **Recent queries** option within the query editor toolbar to display your recent queries. + +PPL and DQL provide an autocomplete option that suggests field names, functions, and syntax. + + +## Data sources and data types enhancements + +You can now select your data sources and types from within the **Discover** dashboard. Follow these steps to try out the feature. + +1. From the **Discover** page, select a data source from the dropdown menu in the upper toolbar. +2. Select the **View all available data** button to display a list of your available data sources. You may need to refresh your page to display any newly added data sources. +3. Select the desired data source and follow steps displayed in the data sources window to manage your data source. + +You can now use **Query Assist** with PPL queries. With **Query Assist**, you can ask questions like _Are there any errors in my logs?_. The assistant includes predefined prompts. Follow these steps to try out the feature: + +1. Select **PPL** from the dropdown menu in the query toolbar. +2. Select the {::nomarkdown}query assist icon{:/} icon and choose a predefined question. The resulting output is displaying in the query editor pane. diff --git a/_dashboards/discover/index-discover.md b/_dashboards/discover/index-discover.md index 25bbb32294e..a051211a12d 100644 --- a/_dashboards/discover/index-discover.md +++ b/_dashboards/discover/index-discover.md @@ -9,97 +9,17 @@ redirect_from: # Analyzing data -Analyze your data in OpenSearch and visualize key metrics using the **Discover** application in OpenSearch Dashboards. In this tutorial, you'll learn about using **Discover** to: +You can analyze your data in OpenSearch and visualize key metrics using the **Discover** application in OpenSearch Dashboards. Using **Discover**, you can explore and visualize data from various data sources, data types, and query languages. -- Add data. -- Interpret and visualize data. -- Share data findings. -- Set alerts. +## Getting started -## Getting started - -Before getting started, make sure you: +Before getting started with exploring and visualizing your data using **Discover**, make sure you: - Install [OpenSearch Dashboards](https://opensearch.org/downloads.html). - Add sample data or import your own data into OpenSearch. See [OpenSearch Dashboards quickstart guide]({{site.url}}{{site.baseurl}}/dashboards/quickstart/) to learn about adding sample datasets or [Managing indexes]({{site.url}}{{site.baseurl}}/im-plugin/index/) to learn about importing your own data. - Have a foundational understanding of [OpenSearch documents and indexes]({{site.url}}{{site.baseurl}}/im-plugin/index/). - -## Defining the search - -To define a search, follow these steps: - -1. On the OpenSearch Dashboards navigation menu, select **Discover**. -2. Choose the data you want to work with. In this case, choose `opensearch_dashboards_sample_data_flights` from the upper-left dropdown menu. -3. Select the {::nomarkdown}calendar icon{:/} icon to change the time range of your search and then select **Refresh**. - -## Analyzing document tables - -In OpenSearch, a document table stores unstructured data. In a document table, each row represents a single document, and each column contains document attributes. - -To examine document attributes, follow these steps: - -1. From the data table's left column, choose the {::nomarkdown}inspect icon{:/} icon to open the **Document Details** window. Select the {::nomarkdown}minimize icon{:/} icon to close the **Document Details** window. -2. Examine the metadata. You can switch between the **Table** and **JSON** tabs to view the data in your preferred format. -3. Select **View surrounding documents** to view data for other log entries either preceding or following your current document or select **View single document** to view a particular log entry. - -The resulting view is shown in the following image. - -Document attributes - -To add or delete fields in a document table, follow these steps: - -1. View the data fields listed under **Available fields** and select the {::nomarkdown}plus icon{:/} icon to add the desired fields to the document table. The field will be automatically added to both **Selected fields** and the document table. For this example, choose the fields `Carrier`, `AvgTicketPrice`, and `Dest`. -2. Select **Sort fields** > **Pick fields to sort by**. Drag and drop the chosen fields in the desired sort order. - -The resulting view is shown in the following image. - -Adding and deleting data fields - -## Searching data - -You can use the search toolbar to enter a [DQL]({{site.url}}{{site.baseurl}}/dashboards/discover/dql/) or [query string]({{site.url}}{{site.baseurl}}/query-dsl/full-text/query-string/) query. The search toolbar is best for basic queries; for full query and filter capability, use [query domain-specific language (DSL)]({{site.url}}{{site.baseurl}}/query-dsl/index/) in the [Dev Tools console]({{site.url}}{{site.baseurl}}/dashboards/dev-tools/index-dev/). - -For more information, see [Discover and Dashboard search toolbar]({{site.url}}{{site.baseurl}}/dashboards/index/#discover-and-dashboard-search-bar). - -## Filtering data - -Filters allow you to narrow the results of a query by specifying certain criteria. You can filter by field, value, or range. The **Add filter** pop-up suggests the available fields and operators. - -To filter your data, follow these steps: - -1. Under the DQL search bar, choose **Add filter**. -2. Select the desired options from the **Field**, **Operator**, and **Value** dropdown lists. For example, select `Cancelled`, `is`, and `true`. -3. Choose **Save**. -4. To remove a filter, choose the {::nomarkdown}cross icon{:/} icon to the right of the filter name. - -The resulting view is shown in the following image. - -Visualize data findings interface - -## Saving a search - -To save your search, including the query text, filters, and current data view, follow these steps: - -1. Select **Save** on the upper-right toolbar. -2. Add a title, and then choose **Save**. -3. Select **Open** on the upper-right toolbar to access your saved searches. - -## Visualizing data findings - -To visualize your data findings, follow these steps: - -1. Select the {::nomarkdown}inspect icon{:/} icon to the right of the field you want to visualize. - - The resulting view is shown in the following image. - - Visualize data findings interface - -2. Select the **Visualize** button. When the **Visualize** application is launched, a visualization appears. - - The resulting view is shown in the following image. - - Data visualization of flight sample data field destination -## Setting alerts +## Next steps -Set alerts to notify you when your data exceeds your specified thresholds. Go to [Alerting dashboards and visualizations]({{site.url}}{{site.baseurl}}/observing-your-data/alerting/dashboards-alerting/) to learn about creating and managing alerts. +- [Defining and analyzing searches]({{site.url}}{{site.baseurl}}/dashboards/discover/defining-analyzing-searches/) +- [Exploring query enhancements]({{site.url}}{{site.baseurl}}/dashboards/discover/exploring-query-enhancements/) \ No newline at end of file diff --git a/_dashboards/discover/time-filter.md b/_dashboards/discover/time-filter.md index 288138d079c..0554f27b393 100644 --- a/_dashboards/discover/time-filter.md +++ b/_dashboards/discover/time-filter.md @@ -2,7 +2,7 @@ layout: default title: Time filter parent: Analyzing data -nav_order: 20 +nav_order: 50 redirect_from: - /dashboards/get-started/time-filter/ - /dashboards/discover/time-filter/ diff --git a/images/dashboards/query-assist.png b/images/dashboards/query-assist.png new file mode 100644 index 0000000000000000000000000000000000000000..d32e65193bf4ffcac116d1590e6fd8191a1775ea GIT binary patch literal 10799 zcmZX31yEei((mFfA$TAx8{FO9-QC?;WEY2Ef#B}J-Q9zPgusU2?(P~q_~U=S`|fw^ zy{YQyp6>p2pP8OhXHHF|nu;tIIw?8;0Kk%$lhSzQ|BwzU@@sF@-4_c0V2apFN~+0A zN&?l~U2N=~tN{SI$W&bvJZ}}373$F6o7_=9bB>3J4!TMg_z)c3t2(} zBMb(@`hqG@RE~}8F;i4GDIUQDBD zOcMqX0Ffblv3Y~P!~OyR-UO;lzfgkcwnoZ!qpgW`@|lC-B)ZhXIq};S!l&@P>y~L) z!m->K0an^9x=CCB+Bc?j@M1Y|4XWT%E0O*R+$FJh?EM@8Hj6j{ zB!N>(?6ad#sj?Ncvf(8sf+FCWOS%#o@bN~x%1cx*G;3>T7rSm_aL zny4E{QS}?(2I5}q+~5{XE7{9+eSgorz0+Vm8pP7C;tv)h?hnUBiF5~jPxUwGWQ#yx zH=^9PGky<6`%g0*K~ z&hEr-1b>7mwI?NF`&yOb7~mm9!u8`?;7$V7Y#&?~>REc5izk2@ zk2;5z^JyvhlXOyEAsL21!N&v+B74zY__mO&+IG=XteFCi+UR!xlx3uQ^NpVICPu4; zp>}J1^T*<+Hj>9bTq&OTwCD;XGUr9}k3t$FDkC0p(rHH&mqiiW&U906DPcp~;#rh%+q2|t9nC@JD8?lejf|~4KoWM|3owQ#< zWd>#M%UGj&{QI~T1WD^@qstUOk!0Rs5$8ECt~cxuRL!P;iz^Qf&s#3Mipc6zt+mZ~Xd6%t0b@K)kqq;4e9bq~Hi# zdXBf5@hOx$Faax0jnHGstb}BkPccGAtdNv%!W@hiUs7A$c^b7vLbgyTB`mzaZ6A>f zAt!{e@aH}r6w4s?RN`nNd0+ZUU@@{s?14R~!mKlcem97norf^8#Oxpg@k?x~1%V#7 z&S&l)d;SDR{k{$Hd~eFOFqh$K*Kvj3?`>%QS@>(=Pu_!2H)wcX^;fbB=S3#}4JO(R zqAL971SuF$i8=+B0d)!WGiup}$swrg172jOlw+aba`dl$rcKOEi%s9n_nT-IDCg`A zc~YQ*r#!=g1mM))eKIt`_yEtE;nXo~uRb zyr~@4)-P(*-N_!3OpUKJsPwFKnmMo3n4zv*(pD{B)d`R+ny9w>*ozEw4%UZqu~`?c^!Bc~8tF{+VQZc=Vi@KNk3$+r$!`iDYjP2WsLje5mI zv72U*X>u*U0;dM2E~H^sW#lqz#ej;Lu||x!N2g(yutw7${(yKTd$ja&|MI}_pzOeS zQOeoTInFc9GxG*~;&~!M&P+~}gP3D4kSZYSA>hGo%xD}3jyu&@dFteaiehn+4v^9i zx7z8g)HD8AJ;Iv1oO-*TdU!JNwf0s%uYjUFucp_iSNx?14s2$N>&!M|7TRYYy1KFW zqdWXEJRN&Y^f8Xo!OoW0lJAFWwD}kF-oys=`owv=nhE+M6H8-D(JiK})PcbmKc#&d z5gLi)RGLBMTuvx4lMJ>cR#EDNt%Dt@1q1hr(<1nOVR(^gwHoFWzYqYaQQ|xMOh!a$Q(=|DAd&FzXTQ7=5J6>%|*sm}40KHO#NlFZDsWl!r5_Bg1Dj zbbaHDeQ+ycP*#<9%zx}DH_(UQ+uHBs>hQg#une2cQO4k^&8pGa$ZC!VW}a4_vPe!( zX^+vG!CbM% z{``0Ypnk@3hJ=E=+(O!f-7Y^DKsdL^!i2lOVHOqSZC$kG787>_GMHLgK~k~f{~nRY%1x9+ztwB}8FU|CbI)i=?5 z_Wn6faLq`uciF( z$@lr5@!ccOv@_SDUhDZ3%|@x=mr&k0T|;eMCrU8=`~}qU`)pG$dtlXqO?{2i(%ebm zNsgd}XY*|P-1ITmaz`^^P3r8;F=_A7#c9w=tOvHom)reQ`X!7Tg?efzKD-ktM; zSI7dJE(u?BZcnn8>Q3>O@BF<^g}--CK9Jrrz9$wbfBtb3FPsC;k)=Qua`MA}*gv&g z-6B%G$n`&9_^9A#a6Y`PuiOT?P0Y>D{XI4)eCA8}@w}sLTXjUV%4D%i=x_R(sdIpQ zfN>pF9kL1Q$D$XT2gCF><|p+hoYkG4hsU0)(C5$O6qyub9~B<2jxVQKi&-6e7C$;a z6W*Mxik*H7%3$0W3PfVlo4A4kOk7Zc(l7z!xnt#9_IJ!LhZq>H;X zkcWkhg$*Qv4g>;)+^uW`G^Awy4SyX8gY2MCR{>U5FE1|^FHRO0cUx9=etv#dHV#$} z4(3-6W{3|MYVOSphJ5&+ApbXxlr_ZC-QE>y?*az?6W83r#RDn~0{xTdKka{>)7snq ze=~t0|DM+C1X=&Fu(GqTvHmCaD^%zot$>=nx3!bLl)dxon!V-_;o}kdm;3)`_}_&8 z1=Ra5Ajf|L|I6_I0<|I5?vgIfuL+?d|68noga6z3Z=ewCKlA>tb@-n}{+IT3l||5n zSpQQo5%j~v#k1EUlG#hCYQ6H;E%vX*_}bIG(m(u_FbFc*YkL3y^bL6_aV>AS<17r9 zcY_3BV=P`BMm_WjjbvqM*7~iIr?yWM5TS^kmO&H z+nYQ;zs_(gUB8ntii(GWc#(rW*7>1JRaAFQ?ytUpCV&xWBt0^kS~U&VgYF3vz=@6k zvb;??TZd;;CXOww)XTCFP*Ti?&7=vPiTOGPDyit`25_JNS(w zVI5(_Aa#)u&*Gp~RJ(NJu@}i+lRKyfpnH|A(X=Q;Q?vc1 ztY$$IgKyKs&|gL8-V#w1QwY>fkx!in(W}+A7g!VXFB>sUnIio7Hxl38{#dX?*)}qC zo?>+RRC)R^ZpIGBLpo*`fb5=xhQEC=wCi4p|3Mo)@rJ=?=C{u&TvqahK0UyyoWIhD zeq1a|LphP+;XF|c{5aP0JcN)Vk`eE-j+d&u7l~=nCTcP$Wo%|}C5v%Ah@tGm%<2Xd z#wW>#`Ln16)4??v=>^viNTyx}Uzk_&;nU-23306#1?=T9o-G56>1TSDZUBLZ3GX6| zR&Ja3N)v}kL9Rjb6e`@rBhZEY!@>#iSj+Vh?vPcXUv{}k<+&a24@=sM%O{&8ELTwr z_|St%3&*puD;o|8^5Lg~1`1d|){O6I!X1=VLEBibE<>7`GbqrC#f{)vBsffoh3o~4 z9fV9a!!WM@^sSne($Fv4Vde0SR*aYCIAwo`{on&Q2c*ANWm!*ggfK{7_go0CIu)eN ztX8Uc%~u3k%|x*w%+ROEs0DU2DwGa6GhA*3^}py;IGNC4Aw#YsRfs5#mD=ImP?aqB zUC_*(51Hs-<>TJ4l{?mRv{&Ws!C7Iqo&5bCBxsbdbb7X)_IaNC{(_1 zdMvS(f5$?oZg{&Y5gX@HfUkaYlO9udYt+bE6*@z5P${V4m4cd^bwN@=!WzZ-60;@d zv44^dX8GaknL|qwUhBhG$COP;n`b(QZi;XPO`uOI#UzsDza?>Cv&t_e$xuWQgeSu2!X1N zR1F0n&Flu*OT$X;?(b{=JbGHM;ucp-02^~>OY;XzTq<{G)JAsoP6%`5uI>@dlDYaX zqX3ZvMVoFEM>is~>X_^*^A0a9>~ zI!%Iz(oXZ?u=^@7bnmMm};Aq>?X7`K917 z=!Du{g}qTrw0g&*S=Uv}oFS@PqWZf9!i6OIc&ykW8s?-~1H7_Y$j>8P@_>ht5)+{# zdoCCrG7#QE#qU9SMW7N;7{uz!03YJsZ$G9{gr=RX#qH6uXlbSb2p*b;unVY%uZ%t^?U+x9!Jb{J<&FMkq%$nIYeeF`&iOVd zTK`Wfl0`G}oo2>a-liddgfAiVSqfoj|1LVM=k8u&EbpczJG~_%)x%qhNu5y0ey?)>0L*F<(NFc<1;NkJDFW%6K_K%dL0Tdlxqmmnn5S%AT8IRoUtFk zkYkLZ2hB^y=cqUF7JXN}F6CDbb=+q*o@Q*ozWvM6tlQ=o4Az!&Bjg0N)T|TB8LncD zn<^fRoVlPTX=K4C?T_nusr5l7@AF>Tr|)niJqb~qW^O#rK1vUM5?>a*%HX13YjgNI zebg4v?Y|-${9%$5sc;xSY|DsD2NBx>9yUElbU-2;kAG#$P*~jP;}jdD}uu+3lp`Yu1qtJvD|XWa*VOjA&S^Mmg{GwrfI%PqP#2=<5a zo@wcu%^^VI)^(zwDE*_Hfwl?nfu`L~;}=}lc=7({%|(4J&@-H}PQN`ZTAa+~P|P8_ zqp?8#xw#hyJC0u(J55)4(&#vpr|S7(;-9b&x5hAwvn$4pJJudQBFzcCO(^bEeG9I5 zKk-RaEH<8E!e3L4#?n(GG^|H3u<9(=)NHT8{bv?7j)Jd0(eDn)f_npgmXa;vhFW`m1w^S@nb+Azs=2fXqrBqS3KX}D&CL6 zC+?+WJEJFhzv*L69{M!X42y!K~|!wjNE1vJ@ApBlb~WbhcBSB z0@#>tR6l`QF?rKQG6mp5^!2>^@>0xt`vCyJ#r)^6dy;jh`%X72d`%ixY|;%v1x8jm??@ae!r|t zN8+u3q_OUn=UR;F6;~dQC6X26^#Ld;M%w?x0b~^L_Ba#+I}1(hc01R&z`0{2q*nF- zw)1+v1R<8%0@;1wfGAPak~Pky9=9JAqP;){dU13SpB=npD|zpI8w}@gSdSb$;jhEp zup|+F?ew7Ze_Ln`_J@as)T!(tB-E(_(D)EK_>eo$VAF`jF2L(|!B=XxfB#lYX=-+Y=8Z3;mFf>HwI2FqRv8r!lJNS3pY9=g| z!nnm`gtho}ia)z_=~}(q;M>1$vmRkOxW?kpl}2onG!Hb`3CbAYZo1<}Ac`qX_4+4; z`gR*d5ZR6!Edq%+bI@?y)!)nN);#N$#$CaT$mX&QRBMm$#f7iazgHBs$BHj8Oo>Jk zvrcjay5WG9Q8HVLiz@pIQ;0x>7WHC;JJPvlwM0b{Bf+r27=p|g1xx83l!J{`imy*U zYM{d}LD7b@JQf74k2W!u{j7PLXKPDq=( zTSBKNjvmZ~Q0yG<@2QfhswfP)_x($_VHii{M&08JK8kR-p?VTaOZ38iY4BEB%wjw& z>QuN`#jYnQ9XEKj-TcUzQi*6{1~HFniEWr1;h-(L3&aH4#WniFk?2NJx{LE4V=XP` zPK7Wtcz4~k0Amf*etJ2I3`=QG0!5tWD2>zVvS$CeIgZmDnol4@BT=n73T>h)({MTt zt&{31g%b&GF>E=pCv&ZL@6d#Ovo%C0$`?2i0#MEgYK4*Yi9`JXu!sI(G*|^_qF0fp z4M(H>Mg(X|afAiD{m4||CNP;?GuG05N3rOQPpu*Yr$0gQG9^aHeP~0b6v*{~Q*)bc zGL_$4I-4&D5_Yh@`isRSMhBrJ1JJK(yOppr!Rjy1@Wc%NJ_09}ZoK>=ek*Y#Z zEGuhoB==+ut58I>%IrAtkB~xj6ln`&c2{74*bT8Aj@gHxxD*(w-Lfz{RmH8G044Q= zP^P~L|E4LJ=KESiO_vfy8*AEUfj;!Gh%{aQpPRX)v5BK&55D|JB=Yxb z!n^HSVI+PQ7*;VoUPRqmft*+&%-8;#qR7Pk;s;^hteM%Vn9(Dm`?b2;>!(}lmeE27 zi)Ucne!ZAdVGIYip7Or>sM=&g7z}{yg=iIJ85%P*+}K3FEFwu3>-bbqCwS|xK;a+{ zeyg|n&3Fm_{HKQO;7>wew6FO5IY?iO#m>imAb43%l>r=uSo{*~=(kFX$d6=a0UfMu zLL-B}juDFFcpjT6TQ zf9eYmoL-!@U2dw%1c4;cI2XaLuMxqqs>Z=&=T7)&asid2Ht6n{6Rrl)c0dI3 z9_B;bjIXTm*PCN!S|U!49tXiXggn>BIG5kD%N)_@iv8N(F)X+o>?+8|`99&eRx7yi8EbJXEG6^(;WnMMQY@4rjjO%oFK=c*d1(cg3c5XalLw6uAZ zuFTmA(DP*f+zc9Kb+D#Z-N1%DxZN5bdP_S^?mK~zw*4ZICq>xp%n0Kd1^6rN_I@Tl zU!3%;p3HFP^_F!kGyJ>`Y0Vu@4x6G2dGE7b5%pDDB};(yHmBvVpp#iuI4Da%HscZ! zdhkddMmkN07TLc=`)iY`03Ub>`7pxby|~O`x7EkgLUo>)+u=DoI||nJt8=uvifiKH zwlW8cGkRStF2@|K3NvnI3T!sYqMp+Lcl7g~B7L2I+$bi{;U#cKZ5p%`Stu!+e0Cz z%OmjY zeuCB3tvlw_dHAUBChD|ygdqnsWzmhz(9h66{ge~Fx^Y_5Sw_RXk$+~-R$q3H$s+@g zhCdb_Wh=wLWZ)kIISX=!LByO>>3~hTl>y`wO&ZYY{zHb%*)6s=1v}XVh8zj@EBZT} z-CbxR7LeV>mcB3ZCm~h>>Q-%>-|q2u37-BuiV2G1d*~b{YauH%%A^iSk&ma&=xb%p zVODbe-bos=*8GO)VZbGQ1O2E#;jHt6+_9M^Xn3b_I@aniECH8td7?6o=TcWrzxJ`uDGv z>^%SZcqfTrJ#j<6gpRvoc87$9V{`7&7ZT?DT`dCuaGNSiVcxm(5n)sz!7ZP!CJ0hYE1=qf(y=o%jtME+xN*4X9Oc5v zs)c5uBtIB8u`R$fYAL=c%Y!GG`;15`W`*PITAmaQ#+r#NJFXA*(^h6z_LO6%Q~J;Y z7uF+TEp1(rs+9Uo{@O)&s4n>|3WBe7w2$KNtM2*D&1}v6W24;pUs2pEk@P-n#OuC1 zW`xci;Wj^o%XFNpj2tR8zz5CKIxWi`QEjcTca(1p_nO>!%SvW2$<_L=&km|ppMF^l ze5kJEgeQ9EMx9=w94z!roGZbGqV35c;j~rkT@jb{JP*>)M#QQYE?@q2Q`+G-L1t4n zJeAc;*76k5jSgA zpp{&vp)bBShEXJu7GhY=HkJH>Cl%1i@zc>BlWy-K#ZB9$g`Km2d~AaJp3KacCTUGN zM&Sl;F|3FXL+2R=ESfD1VF_5it&4>CNm+`LRg3R!oX#23WhhBQLK2&`Rl4l|e3#*+N$OF(pyKh{-ZG|@T&j%8HP?}u6 zh0b?dI8zudcDe4Jdwau~(E^8iLJ;LiVbuv15Gb3bN28yqN+H%|o$xlM72*IzNe(PM zJ-I<%f}{9NNk*#1*evO>2qn#ENtOLfokOOh?XNpU??Ap@Y4c`w%0G`d^61NuGet|D zk-P?{7~}Asx|536nYDf(6;G1fB#9!G|I#LKWvH2-v?^h&^gAOp{Ha3Z+-Ez<-ZT*H z@bfMha}uz~vl73uyh&N4CRZnXVlZ0W!lj+|E=9SWIkR28D5Ca;%r*2>oGMCTtDG%W zxgOJ|#!LYcP3&iQotYEe^f9u?5_vr8>b!D-51W)G^k5UjK*l(c(?VqZP=;X7%8g_< z=%lI7=V5@%lfk6o+B2ACj^gEf{>5V}Mr9knO*VCB3z;O#6y*-B@4FO-3YpR*)<|h& zfIUD4&c14UmKzCwc6LKa%Pzic-@@TTe4M|iRFlDOt7r#cB z9WBojk`IKmNxj~u?Cn-VKi76`EMJ{tmj|?WoZN`1Oxx9+F0WCA@_X5KrNx9>ZG4P> zsR{v?VD*dVA%-qcAtpp2S94x$Ma`tS8S$xr8dCq*n+u28b~fFQTU#kIS?w^6EC@Y2 zhBm{stIr3^hX<}!O%G8qrekJZ3T&3Yd;Am>uw)$I!N$L#;y%oyv(ELLNlF{eQ3fpY z^XkKTzO*N}+c3No99HEOc{hAuA2-NGOPd{dk@`z|s?IoIZPYX;`{S=3=W!>|hVyEp z03YApUj)3ZUy%}S4rBiAg?dW<-I4d&6)1Yzsqy}fxQj@17w8VX{JKWGJ%Y2p=ar3! zs?sZZf9D0>yevcVdF%3*)jfVqe05yv3H!n;fmdoh91L-mj=RhwAk724{pdY*RQ%^% z;Uyy&!knNPF}1fWq~sT}p!z%g;PRQ|wl}n^K>v<>+XZbh_o=5VAP_2fwtf2iZ1OU| zK8eh)jFM-QG4*vRS!Cqx@hESH@$VLw3#4b`)9b)cHTsu42K#^Ay2?wdNYzT1h5R4$ Cmr>II literal 0 HcmV?d00001 From 48bfa61081deff66b04b47fe0562a5e06009420b Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Mon, 16 Sep 2024 12:59:25 -0600 Subject: [PATCH 03/22] Update index.md, add enhancements, move text to new page Signed-off-by: Melissa Vagi --- _dashboards/discover/index-discover.md | 5 ----- 1 file changed, 5 deletions(-) diff --git a/_dashboards/discover/index-discover.md b/_dashboards/discover/index-discover.md index a051211a12d..fb6814e4f9a 100644 --- a/_dashboards/discover/index-discover.md +++ b/_dashboards/discover/index-discover.md @@ -18,8 +18,3 @@ Before getting started with exploring and visualizing your data using **Discover - Install [OpenSearch Dashboards](https://opensearch.org/downloads.html). - Add sample data or import your own data into OpenSearch. See [OpenSearch Dashboards quickstart guide]({{site.url}}{{site.baseurl}}/dashboards/quickstart/) to learn about adding sample datasets or [Managing indexes]({{site.url}}{{site.baseurl}}/im-plugin/index/) to learn about importing your own data. - Have a foundational understanding of [OpenSearch documents and indexes]({{site.url}}{{site.baseurl}}/im-plugin/index/). - -## Next steps - -- [Defining and analyzing searches]({{site.url}}{{site.baseurl}}/dashboards/discover/defining-analyzing-searches/) -- [Exploring query enhancements]({{site.url}}{{site.baseurl}}/dashboards/discover/exploring-query-enhancements/) \ No newline at end of file From 9f891f9563fd3363594e414149bfb62c878708eb Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Mon, 14 Oct 2024 14:10:37 -0600 Subject: [PATCH 04/22] Update exploring-query-enhancements.md Signed-off-by: Melissa Vagi --- _dashboards/discover/exploring-query-enhancements.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_dashboards/discover/exploring-query-enhancements.md b/_dashboards/discover/exploring-query-enhancements.md index 943f2bf19eb..f5bd570429f 100644 --- a/_dashboards/discover/exploring-query-enhancements.md +++ b/_dashboards/discover/exploring-query-enhancements.md @@ -16,7 +16,7 @@ Starting with OpenSearch 2.17, query enhancements have been made. These enhancem - Data selector with **Data Explorer** that supports index patterns, indexes, and Amazon S3 connections and data configuration that supports selecting the appropriate query language based on the data type - Link sharing through URLs without needing write permission to create an index pattern -All existing functionality remains in OpenSearch 2.17, and the new features are designed to improve your data exploration experience. The **Enable query enhancements** is currently not on a minimum distribution. . You can leave your feedback at to help the OpenSearch Project improve. +All existing functionality remains in OpenSearch 2.17, and the new features are designed to improve your data exploration experience. The **Enable query enhancements** is currently not on a minimal distribution. In a minimal distribution of OpenSearch and OpenSearch Dashboards, query enhancements do not provide access to PPL or SQL functionality. To use these features, the [OpenSearch SQL plugin]({{site.url}}{{site.baseurl}}/search-plugins/sql/settings/) is required. Query enhancements do work with a basic OpenSearch installation, but to enable SQL, PPL, and external datasource queries, additional plugins such as the SQL plugin are necessary. Ensure that you have the [required plugins]({{site.url}}{{site.baseurl}}/install-and-configure/plugins/) installed to take full advantage of these query enhancement features. You can leave your feedback at [https://forum.opensearch.org/)](https://forum.opensearch.org/) to help the OpenSearch Software Foundation improve this feature. {: .note} ## Enabling query enhancements From 5432c4f098083d6cebce825fd2f8e447ee5a5e48 Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Mon, 14 Oct 2024 14:11:13 -0600 Subject: [PATCH 05/22] Update _dashboards/discover/exploring-query-enhancements.md Signed-off-by: Melissa Vagi --- _dashboards/discover/exploring-query-enhancements.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_dashboards/discover/exploring-query-enhancements.md b/_dashboards/discover/exploring-query-enhancements.md index f5bd570429f..73d21352aa2 100644 --- a/_dashboards/discover/exploring-query-enhancements.md +++ b/_dashboards/discover/exploring-query-enhancements.md @@ -6,7 +6,7 @@ nav_order: 20 --- # Exploring query enhancements -Introduced 2.17 +Introduced 2.18 {: .label .label-purple } Starting with OpenSearch 2.17, query enhancements have been made. These enhancements are experimental and may be subject to change or instability. Enhancements include the following: From b0b1b2f58dabef054f89c99a01b0e7a1e1430a4f Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Mon, 14 Oct 2024 14:15:43 -0600 Subject: [PATCH 06/22] Update _dashboards/discover/exploring-query-enhancements.md Signed-off-by: Melissa Vagi --- _dashboards/discover/exploring-query-enhancements.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_dashboards/discover/exploring-query-enhancements.md b/_dashboards/discover/exploring-query-enhancements.md index 73d21352aa2..63cce4e691b 100644 --- a/_dashboards/discover/exploring-query-enhancements.md +++ b/_dashboards/discover/exploring-query-enhancements.md @@ -16,7 +16,7 @@ Starting with OpenSearch 2.17, query enhancements have been made. These enhancem - Data selector with **Data Explorer** that supports index patterns, indexes, and Amazon S3 connections and data configuration that supports selecting the appropriate query language based on the data type - Link sharing through URLs without needing write permission to create an index pattern -All existing functionality remains in OpenSearch 2.17, and the new features are designed to improve your data exploration experience. The **Enable query enhancements** is currently not on a minimal distribution. In a minimal distribution of OpenSearch and OpenSearch Dashboards, query enhancements do not provide access to PPL or SQL functionality. To use these features, the [OpenSearch SQL plugin]({{site.url}}{{site.baseurl}}/search-plugins/sql/settings/) is required. Query enhancements do work with a basic OpenSearch installation, but to enable SQL, PPL, and external datasource queries, additional plugins such as the SQL plugin are necessary. Ensure that you have the [required plugins]({{site.url}}{{site.baseurl}}/install-and-configure/plugins/) installed to take full advantage of these query enhancement features. You can leave your feedback at [https://forum.opensearch.org/)](https://forum.opensearch.org/) to help the OpenSearch Software Foundation improve this feature. +All existing functionality remains in OpenSearch 2.17, and the new features are designed to improve your data exploration experience. The **Enable query enhancements** is currently not on a minimal distribution. In a minimal distribution of OpenSearch and OpenSearch Dashboards, query enhancements do not provide access to PPL or SQL functionality. To use these features, the [OpenSearch SQL plugin]({{site.url}}{{site.baseurl}}/search-plugins/sql/settings/) is required. Query enhancements do work with a basic OpenSearch installation, but to enable SQL, PPL, and external datasource queries, additional plugins such as the SQL plugin are necessary. Ensure that you have the [required plugins]({{site.url}}{{site.baseurl}}/install-and-configure/plugins/) installed to take full advantage of these query enhancement features. You can leave your feedback at [https://forum.opensearch.org/)](https://forum.opensearch.org/) to help the OpenSearch open source project improve this feature. {: .note} ## Enabling query enhancements From 438b376576e1242e2341e4c56bccc7289549d220 Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Wed, 16 Oct 2024 11:35:45 -0600 Subject: [PATCH 07/22] Update _dashboards/discover/exploring-query-enhancements.md Signed-off-by: Melissa Vagi --- _dashboards/discover/exploring-query-enhancements.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/_dashboards/discover/exploring-query-enhancements.md b/_dashboards/discover/exploring-query-enhancements.md index 63cce4e691b..e794c270929 100644 --- a/_dashboards/discover/exploring-query-enhancements.md +++ b/_dashboards/discover/exploring-query-enhancements.md @@ -16,7 +16,11 @@ Starting with OpenSearch 2.17, query enhancements have been made. These enhancem - Data selector with **Data Explorer** that supports index patterns, indexes, and Amazon S3 connections and data configuration that supports selecting the appropriate query language based on the data type - Link sharing through URLs without needing write permission to create an index pattern -All existing functionality remains in OpenSearch 2.17, and the new features are designed to improve your data exploration experience. The **Enable query enhancements** is currently not on a minimal distribution. In a minimal distribution of OpenSearch and OpenSearch Dashboards, query enhancements do not provide access to PPL or SQL functionality. To use these features, the [OpenSearch SQL plugin]({{site.url}}{{site.baseurl}}/search-plugins/sql/settings/) is required. Query enhancements do work with a basic OpenSearch installation, but to enable SQL, PPL, and external datasource queries, additional plugins such as the SQL plugin are necessary. Ensure that you have the [required plugins]({{site.url}}{{site.baseurl}}/install-and-configure/plugins/) installed to take full advantage of these query enhancement features. You can leave your feedback at [https://forum.opensearch.org/)](https://forum.opensearch.org/) to help the OpenSearch open source project improve this feature. +All existing functionality remains in OpenSearch 2.17, and the new features are designed to improve your data exploration experience. The **Enable query enhancements** is currently not on a minimal distribution. In a minimal distribution of OpenSearch and OpenSearch Dashboards, query enhancements do not provide access to PPL or SQL functionality. To use these features, the [OpenSearch SQL plugin]({{site.url}}{{site.baseurl}}/search-plugins/sql/settings/) is required. + +Query enhancements work with a basic OpenSearch installation, but to enable SQL, PPL, and external data source queries, additional plugins such as the SQL plugin are necessary. Ensure that you have the [required plugins]({{site.url}}{{site.baseurl}}/install-and-configure/plugins/) installed to take full advantage of these query enhancement features. + +You can leave your feedback at [https://forum.opensearch.org/)](https://forum.opensearch.org/) to help the OpenSearch open source project improve this feature. {: .note} ## Enabling query enhancements From 6f1a197fb86f9db71a8122cfd95f1c154e8cef40 Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Wed, 16 Oct 2024 11:36:44 -0600 Subject: [PATCH 08/22] Update _dashboards/discover/exploring-query-enhancements.md Signed-off-by: Melissa Vagi --- _dashboards/discover/exploring-query-enhancements.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_dashboards/discover/exploring-query-enhancements.md b/_dashboards/discover/exploring-query-enhancements.md index e794c270929..23976afe180 100644 --- a/_dashboards/discover/exploring-query-enhancements.md +++ b/_dashboards/discover/exploring-query-enhancements.md @@ -63,7 +63,7 @@ source = opensearch_dashboards_sample_data_logs PPL and DQL provide an autocomplete option that suggests field names, functions, and syntax. -## Data sources and data types enhancements +## Selecting data sources and data types through the UI You can now select your data sources and types from within the **Discover** dashboard. Follow these steps to try out the feature. From 6beaba9983ef7f5b1835f10089ab2f5d520fff5c Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Tue, 22 Oct 2024 09:24:38 -0600 Subject: [PATCH 09/22] Update _dashboards/discover/exploring-query-enhancements.md Signed-off-by: Melissa Vagi --- _dashboards/discover/exploring-query-enhancements.md | 1 + 1 file changed, 1 insertion(+) diff --git a/_dashboards/discover/exploring-query-enhancements.md b/_dashboards/discover/exploring-query-enhancements.md index 23976afe180..e9f04b951cb 100644 --- a/_dashboards/discover/exploring-query-enhancements.md +++ b/_dashboards/discover/exploring-query-enhancements.md @@ -13,6 +13,7 @@ Starting with OpenSearch 2.17, query enhancements have been made. These enhancem - Query languages PPL and SQL, with **Query Assist** for PPL - Multiline query editor for PPL and SQL and autocomplete for PPL and DQL +- Expand/collapse query editor for multiline/single-line mode - Data selector with **Data Explorer** that supports index patterns, indexes, and Amazon S3 connections and data configuration that supports selecting the appropriate query language based on the data type - Link sharing through URLs without needing write permission to create an index pattern From c921d471383bb1fbc6fb2e35b57bc068deb46818 Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Tue, 22 Oct 2024 09:31:50 -0600 Subject: [PATCH 10/22] Update _dashboards/discover/exploring-query-enhancements.md Signed-off-by: Melissa Vagi --- _dashboards/discover/exploring-query-enhancements.md | 1 + 1 file changed, 1 insertion(+) diff --git a/_dashboards/discover/exploring-query-enhancements.md b/_dashboards/discover/exploring-query-enhancements.md index e9f04b951cb..3af44d46706 100644 --- a/_dashboards/discover/exploring-query-enhancements.md +++ b/_dashboards/discover/exploring-query-enhancements.md @@ -15,6 +15,7 @@ Starting with OpenSearch 2.17, query enhancements have been made. These enhancem - Multiline query editor for PPL and SQL and autocomplete for PPL and DQL - Expand/collapse query editor for multiline/single-line mode - Data selector with **Data Explorer** that supports index patterns, indexes, and Amazon S3 connections and data configuration that supports selecting the appropriate query language based on the data type +- OpenSearch Dashboards allows for exploring your data within your indexes without using index patterns - Link sharing through URLs without needing write permission to create an index pattern All existing functionality remains in OpenSearch 2.17, and the new features are designed to improve your data exploration experience. The **Enable query enhancements** is currently not on a minimal distribution. In a minimal distribution of OpenSearch and OpenSearch Dashboards, query enhancements do not provide access to PPL or SQL functionality. To use these features, the [OpenSearch SQL plugin]({{site.url}}{{site.baseurl}}/search-plugins/sql/settings/) is required. From 268d517cc9ead4e58c0876e2108a5afafd6c5848 Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Tue, 29 Oct 2024 11:32:36 -0600 Subject: [PATCH 11/22] Update _dashboards/discover/defining-analyzing-searches.md Signed-off-by: Melissa Vagi --- _dashboards/discover/defining-analyzing-searches.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_dashboards/discover/defining-analyzing-searches.md b/_dashboards/discover/defining-analyzing-searches.md index 95151836d3f..a586810334f 100644 --- a/_dashboards/discover/defining-analyzing-searches.md +++ b/_dashboards/discover/defining-analyzing-searches.md @@ -7,7 +7,7 @@ nav_order: 10 # Defining and analyzing searches -Discovering and exploring data in OpenSearch Dashboards is a powerful way to gain insights from your data. The Discover application within OpenSearch Dashboards provides a flexible interface for defining and analyzing searches across your data. +The **Discover** application in OpenSearch Dashboards offers a flexible interface for defining and analyzing searches across your data, enabling powerful insights and visualizations. ## Defining a search From 39c5f949edd6cf7c8a3ce7e31de119c3a491a269 Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Tue, 29 Oct 2024 11:34:52 -0600 Subject: [PATCH 12/22] Update _dashboards/discover/defining-analyzing-searches.md Signed-off-by: Melissa Vagi --- _dashboards/discover/defining-analyzing-searches.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_dashboards/discover/defining-analyzing-searches.md b/_dashboards/discover/defining-analyzing-searches.md index a586810334f..2c6eaa37eab 100644 --- a/_dashboards/discover/defining-analyzing-searches.md +++ b/_dashboards/discover/defining-analyzing-searches.md @@ -19,7 +19,7 @@ To define a search, follow these steps: ## Analyzing document tables -In OpenSearch, a document table stores unstructured data. In a document table, each row represents a single document, and each column contains document attributes. +OpenSearch uses document tables to store unstructured data, where each row corresponds to an individual document and columns represent various document attributes. ### View document attributes From 357951973dcdbc21d42aee5274bd6550472e7908 Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Tue, 29 Oct 2024 11:38:06 -0600 Subject: [PATCH 13/22] Update _dashboards/discover/defining-analyzing-searches.md Signed-off-by: Melissa Vagi --- _dashboards/discover/defining-analyzing-searches.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_dashboards/discover/defining-analyzing-searches.md b/_dashboards/discover/defining-analyzing-searches.md index 2c6eaa37eab..67d5dcec388 100644 --- a/_dashboards/discover/defining-analyzing-searches.md +++ b/_dashboards/discover/defining-analyzing-searches.md @@ -38,7 +38,7 @@ To add or delete fields in a document table, follow these steps: ## Searching data -You can use the search toolbar to enter a [DQL]({{site.url}}{{site.baseurl}}/dashboards/discover/dql/) or [query string]({{site.url}}{{site.baseurl}}/query-dsl/full-text/query-string/) query. The search toolbar is best for basic queries; for full query and filter capability, use [query domain-specific language (DSL)]({{site.url}}{{site.baseurl}}/query-dsl/index/) in the [Dev Tools console]({{site.url}}{{site.baseurl}}/dashboards/dev-tools/index-dev/). +The search toolbar in **Discover** supports both [DQL]({{site.url}}{{site.baseurl}}/dashboards/discover/dql/) and [query string]({{site.url}}{{site.baseurl}}/query-dsl/full-text/query-string/) queries. For more complex queries and full filter capabilities, use [query domain-specific language (DSL)]({{site.url}}{{site.baseurl}}/query-dsl/index/) in the [Dev Tools console]({{site.url}}{{site.baseurl}}/dashboards/dev-tools/index-dev/). For more information, see [Discover and Dashboard search toolbar]({{site.url}}{{site.baseurl}}/dashboards/index/#discover-and-dashboard-search-bar). From a8152c5bb95df04ba7fd155452a12875e77a6ad1 Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Tue, 29 Oct 2024 11:40:35 -0600 Subject: [PATCH 14/22] Update _dashboards/discover/defining-analyzing-searches.md Signed-off-by: Melissa Vagi --- _dashboards/discover/defining-analyzing-searches.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_dashboards/discover/defining-analyzing-searches.md b/_dashboards/discover/defining-analyzing-searches.md index 67d5dcec388..4f8261ad153 100644 --- a/_dashboards/discover/defining-analyzing-searches.md +++ b/_dashboards/discover/defining-analyzing-searches.md @@ -44,7 +44,7 @@ For more information, see [Discover and Dashboard search toolbar]({{site.url}}{{ ## Filtering data -Filters allow you to narrow the results of a query by specifying certain criteria. You can filter by field, value, or range. The **Add filter** pop-up suggests the available fields and operators. +You can use filters to refine query results by specifying certain criteria such as field, value, or range. The **Add filter** feature provides suggestions for available fields and operators. To filter your data, follow these steps: From feb7db8f3154887d0f72ff72f6b5cd45b72c1fa2 Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Tue, 29 Oct 2024 11:43:32 -0600 Subject: [PATCH 15/22] Update _dashboards/discover/defining-analyzing-searches.md Signed-off-by: Melissa Vagi --- _dashboards/discover/defining-analyzing-searches.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_dashboards/discover/defining-analyzing-searches.md b/_dashboards/discover/defining-analyzing-searches.md index 4f8261ad153..da521738370 100644 --- a/_dashboards/discover/defining-analyzing-searches.md +++ b/_dashboards/discover/defining-analyzing-searches.md @@ -70,4 +70,4 @@ To visualize your data findings, follow these steps: ## Setting alerts -Set alerts to notify you when your data exceeds your specified thresholds. Go to [Alerting dashboards and visualizations]({{site.url}}{{site.baseurl}}/observing-your-data/alerting/dashboards-alerting/) to learn about creating and managing alerts. +Configure alerts to receive notifications when your data exceeds the specified thresholds. For detailed information about setting up and managing alerts, see [Alerting dashboards and visualizations]({{site.url}}{{site.baseurl}}/observing-your-data/alerting/dashboards-alerting/). From a390fe2bb0e82f4e7e8195518567d2dc844c3835 Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Tue, 29 Oct 2024 11:44:22 -0600 Subject: [PATCH 16/22] Update _dashboards/discover/exploring-query-enhancements.md Signed-off-by: Melissa Vagi --- _dashboards/discover/exploring-query-enhancements.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_dashboards/discover/exploring-query-enhancements.md b/_dashboards/discover/exploring-query-enhancements.md index 3af44d46706..d7932dd560b 100644 --- a/_dashboards/discover/exploring-query-enhancements.md +++ b/_dashboards/discover/exploring-query-enhancements.md @@ -13,7 +13,7 @@ Starting with OpenSearch 2.17, query enhancements have been made. These enhancem - Query languages PPL and SQL, with **Query Assist** for PPL - Multiline query editor for PPL and SQL and autocomplete for PPL and DQL -- Expand/collapse query editor for multiline/single-line mode +- Query editor expand/collapse for multiline/single-line mode - Data selector with **Data Explorer** that supports index patterns, indexes, and Amazon S3 connections and data configuration that supports selecting the appropriate query language based on the data type - OpenSearch Dashboards allows for exploring your data within your indexes without using index patterns - Link sharing through URLs without needing write permission to create an index pattern From 7cb37bd3823e577b4641af4912d71cbf7843f7ec Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Tue, 29 Oct 2024 11:47:56 -0600 Subject: [PATCH 17/22] Update _dashboards/discover/exploring-query-enhancements.md Signed-off-by: Melissa Vagi --- _dashboards/discover/exploring-query-enhancements.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_dashboards/discover/exploring-query-enhancements.md b/_dashboards/discover/exploring-query-enhancements.md index d7932dd560b..4f03a9f3c8a 100644 --- a/_dashboards/discover/exploring-query-enhancements.md +++ b/_dashboards/discover/exploring-query-enhancements.md @@ -14,7 +14,7 @@ Starting with OpenSearch 2.17, query enhancements have been made. These enhancem - Query languages PPL and SQL, with **Query Assist** for PPL - Multiline query editor for PPL and SQL and autocomplete for PPL and DQL - Query editor expand/collapse for multiline/single-line mode -- Data selector with **Data Explorer** that supports index patterns, indexes, and Amazon S3 connections and data configuration that supports selecting the appropriate query language based on the data type +- **Data Explorer** feature that supports diverse data sources, such as index patterns, indexes, and Amazon S3 connections, with built-in support for selecting the appropriate query language for your chosen data type - OpenSearch Dashboards allows for exploring your data within your indexes without using index patterns - Link sharing through URLs without needing write permission to create an index pattern From 0ffbd4d3ba309df97c55375dd640ba452216b884 Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Tue, 29 Oct 2024 11:51:36 -0600 Subject: [PATCH 18/22] Update _dashboards/discover/exploring-query-enhancements.md Signed-off-by: Melissa Vagi --- _dashboards/discover/exploring-query-enhancements.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/_dashboards/discover/exploring-query-enhancements.md b/_dashboards/discover/exploring-query-enhancements.md index 4f03a9f3c8a..f75767d473f 100644 --- a/_dashboards/discover/exploring-query-enhancements.md +++ b/_dashboards/discover/exploring-query-enhancements.md @@ -18,7 +18,8 @@ Starting with OpenSearch 2.17, query enhancements have been made. These enhancem - OpenSearch Dashboards allows for exploring your data within your indexes without using index patterns - Link sharing through URLs without needing write permission to create an index pattern -All existing functionality remains in OpenSearch 2.17, and the new features are designed to improve your data exploration experience. The **Enable query enhancements** is currently not on a minimal distribution. In a minimal distribution of OpenSearch and OpenSearch Dashboards, query enhancements do not provide access to PPL or SQL functionality. To use these features, the [OpenSearch SQL plugin]({{site.url}}{{site.baseurl}}/search-plugins/sql/settings/) is required. +OpenSearch 2.18 builds upon existing features with new query enhancements designed to improve data exploration. However, these enhancements, including PPL and SQL functionality, are not available in minimal distributions and require the separate installation of the [OpenSearch SQL plugin]({{site.url}}{{site.baseurl}}/search-plugins/sql/settings/). +{: .note} Query enhancements work with a basic OpenSearch installation, but to enable SQL, PPL, and external data source queries, additional plugins such as the SQL plugin are necessary. Ensure that you have the [required plugins]({{site.url}}{{site.baseurl}}/install-and-configure/plugins/) installed to take full advantage of these query enhancement features. From c0be285166048d9485db88b02969c16319222991 Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Tue, 29 Oct 2024 12:17:06 -0600 Subject: [PATCH 19/22] Update _dashboards/discover/exploring-query-enhancements.md Signed-off-by: Melissa Vagi --- _dashboards/discover/exploring-query-enhancements.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_dashboards/discover/exploring-query-enhancements.md b/_dashboards/discover/exploring-query-enhancements.md index f75767d473f..31d1740c3bd 100644 --- a/_dashboards/discover/exploring-query-enhancements.md +++ b/_dashboards/discover/exploring-query-enhancements.md @@ -21,7 +21,7 @@ Starting with OpenSearch 2.17, query enhancements have been made. These enhancem OpenSearch 2.18 builds upon existing features with new query enhancements designed to improve data exploration. However, these enhancements, including PPL and SQL functionality, are not available in minimal distributions and require the separate installation of the [OpenSearch SQL plugin]({{site.url}}{{site.baseurl}}/search-plugins/sql/settings/). {: .note} -Query enhancements work with a basic OpenSearch installation, but to enable SQL, PPL, and external data source queries, additional plugins such as the SQL plugin are necessary. Ensure that you have the [required plugins]({{site.url}}{{site.baseurl}}/install-and-configure/plugins/) installed to take full advantage of these query enhancement features. +While query enhancements work with a standard OpenSearch installation, enabling SQL, PPL, and external data source queries requires additional plugins, particularly the SQL plugin. For optimal use of these query enhancement features, make sure to install the [required plugins]({{site.url}}{{site.baseurl}}/install-and-configure/plugins/) across all relevant data sources. You can leave your feedback at [https://forum.opensearch.org/)](https://forum.opensearch.org/) to help the OpenSearch open source project improve this feature. {: .note} From 20d4dcfe286f7a6a91c99c0f07155751843f765a Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Tue, 29 Oct 2024 12:19:20 -0600 Subject: [PATCH 20/22] Update _dashboards/discover/defining-analyzing-searches.md Signed-off-by: Melissa Vagi --- _dashboards/discover/defining-analyzing-searches.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_dashboards/discover/defining-analyzing-searches.md b/_dashboards/discover/defining-analyzing-searches.md index da521738370..b632e43d4bc 100644 --- a/_dashboards/discover/defining-analyzing-searches.md +++ b/_dashboards/discover/defining-analyzing-searches.md @@ -21,7 +21,7 @@ To define a search, follow these steps: OpenSearch uses document tables to store unstructured data, where each row corresponds to an individual document and columns represent various document attributes. -### View document attributes +### Viewing document attributes To review document attributes, follow these steps: From 150aa5815d724537ae4ea572b82eb875c7a557bc Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Tue, 29 Oct 2024 12:20:00 -0600 Subject: [PATCH 21/22] Update _dashboards/discover/defining-analyzing-searches.md Signed-off-by: Melissa Vagi --- _dashboards/discover/defining-analyzing-searches.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_dashboards/discover/defining-analyzing-searches.md b/_dashboards/discover/defining-analyzing-searches.md index b632e43d4bc..f55e8884d51 100644 --- a/_dashboards/discover/defining-analyzing-searches.md +++ b/_dashboards/discover/defining-analyzing-searches.md @@ -29,7 +29,7 @@ To review document attributes, follow these steps: 2. Examine the metadata. You can switch between the **Table** and **JSON** tabs to view the data in your preferred format. 3. Select **View surrounding documents** to view data for other log entries either preceding or following your current document or select **View single document** to view a particular log entry. -### Add or delete fields in document tables +### Adding or deleting fields in document tables To add or delete fields in a document table, follow these steps: From 6fc38662434ebbb730408575925f29d7284e0bcd Mon Sep 17 00:00:00 2001 From: Melissa Vagi Date: Tue, 29 Oct 2024 12:20:58 -0600 Subject: [PATCH 22/22] Update _dashboards/discover/exploring-query-enhancements.md Signed-off-by: Melissa Vagi --- _dashboards/discover/exploring-query-enhancements.md | 1 - 1 file changed, 1 deletion(-) diff --git a/_dashboards/discover/exploring-query-enhancements.md b/_dashboards/discover/exploring-query-enhancements.md index 31d1740c3bd..707639e5e68 100644 --- a/_dashboards/discover/exploring-query-enhancements.md +++ b/_dashboards/discover/exploring-query-enhancements.md @@ -19,7 +19,6 @@ Starting with OpenSearch 2.17, query enhancements have been made. These enhancem - Link sharing through URLs without needing write permission to create an index pattern OpenSearch 2.18 builds upon existing features with new query enhancements designed to improve data exploration. However, these enhancements, including PPL and SQL functionality, are not available in minimal distributions and require the separate installation of the [OpenSearch SQL plugin]({{site.url}}{{site.baseurl}}/search-plugins/sql/settings/). -{: .note} While query enhancements work with a standard OpenSearch installation, enabling SQL, PPL, and external data source queries requires additional plugins, particularly the SQL plugin. For optimal use of these query enhancement features, make sure to install the [required plugins]({{site.url}}{{site.baseurl}}/install-and-configure/plugins/) across all relevant data sources.