Diagnose an incident
Search and correlate logs in a few queries.
Observability · Courses
Kibana and Elastic Observability: from discovery to expertise
Complete course on Kibana and Elastic Observability: installation, Discover, KQL and ES|QL, Lens and dashboards, APM and OpenTelemetry, alerting, SLOs, spaces and roles.
At your pace, through practice.By the end of this course you will be able to
- Install Kibana and create data views
- Search with KQL and analyse with ES|QL
- Build versioned Lens dashboards
- Use Elastic Observability (logs, infrastructure, APM)
- Create alerts and organise Kibana with spaces and roles
LEARNING PATH
Course curriculum
0Course overview1 lesson
1Introduction and installation2 lessons
Kibana, installation and data views.
2Exploring data1 lesson
Discover, KQL and ES|QL.
3Visualising4 lessons
4Elastic Observability3 lessons
Logs, infrastructure, APM and synthetics.
5Alerts and SLOs1 lesson
Rules, connectors and objectives.
6Administration2 lessons
Spaces, roles and monitoring.
8Machine learning and Elastic Security4 lessons
Anomaly detection, AIOps, SIEM and detection rules.
- Machine learning: anomaly detection and AIOpsArticle · ⏱ 6 min
- Lab: Detect anomalies with machine learningHands-on lab · ⏱ 40 min · Level 3/5
- Elastic Security: SIEM, detection rules and investigationArticle · ⏱ 4 min
- Lab: Detect a brute-force attack with Elastic SecurityHands-on lab · ⏱ 40 min · Level 3/5
7Best practices1 lesson
Recommended practices for running the product in production.
9Elastic path project2 lessons
Apply the whole Elastic Stack to a real case.
90Certification preparation3 lessons
Preparation paths for the vendor's official certifications: unlimited practice exams, dashboard and readiness verdict.
LEARN BY DOING
Use cases & applications
Operations dashboards
Shared, versioned indicators.
Application observability
APM, traces and service map.
Multi-team platform
Isolated spaces and roles.
Recommended prerequisites
What next?
Frequently asked questions
Does Kibana store data?
No: it queries Elasticsearch and stores its own objects there (dashboards, rules, data views).
KQL or ES|QL?
KQL filters documents; ES|QL chains filters, calculations and aggregations. KQL is often used in Discover and ES|QL for analysis.
Do I need a paid licence?
Kibana can be used for free; some features (third-party connectors, document-level security, advanced SLOs) depend on the licence.
Does Elastic support OpenTelemetry?
Yes: Elastic Observability ingests OTLP and publishes its own OpenTelemetry distributions (EDOT).