content_image/991065.jpg
3. In the search box, enter the query that will generate the data and apply the relevant filters. This is the same as writing a query and filters in the Discover section. In this example the term ‘websphere’ is used to search for instances of ‘websphere’ in the log data. 

4. In the left side pane, select the data  tab, select metrics , then set slice size to Count . 

5. In the buckets section, select Split Slices  and set the following values: 

a. Set Aggregation  to Terms . 

b. Set Field  to kubernetes.namespace.keyword . 

c. Set Order By  to metric: Count . 

d. Set Order  to Descending  and Size  to 10 . 

6. Select the Play  icon at the top of this pane and the pie chart should display with the data from the search query. In this case, it will show the top 10 namespaces that contain the highest number of logs generated by websphere containers. You can use the filters to exclude certain namespaces, such as kube-system. 

The result should look similar to Figure 5-23. Save the visualization using the Save  link at the top of the page, as this will be used later to add to a dashboard. 

<img src='content_image/991065.jpg'>

Explore the other visualizations available, ideally creating a few more as these can be used to create a more meaningful Kibana Dashboard. 

## Dashboards 

The Kibana Dashboard page is where you can create, modify and view your own custom dashboards where multiple visualizations can be combined on to a single page and filter them by providing a search query or by selecting filters. Dashboards are useful for when you want to get an overview of your logs and make correlations among various visualizations and logs. 

To create a new Dashboard, select the +  icon, or Create Visualization , if none exist. Select Add Visualization , then select the visualizations created earlier you want to display in this dashboard. From here, you further filter the data shown in the individual visualizations by entering a search query, changing the time filter, or clicking on the elements within the visualization. The search and time filters work just like they do in the Discover page, except 

