- On discover tab construct some search with results
- For the visualization we will need combination of numeric, date time, and string data types
- Save the search definitions to reuse in the Visualization
- Switch to Visualize tab
- Select Data Table
- Select saved search or start over with a new search
- Select metrics
- Select aggregations
- Experiment with different options
- Save your definitions - you may want to comeback to them later.