This can be visualized easily using a data table.
The steps are as follows:
- Create a new visualization
- Click on New and select Data Table
- Select Logstash-* under From a New Search, Select Index
- Select Buckets type as Split Rows
- Select Aggregation as Terms
- Select the request.keyword field
- Set the Size to 10
- Click the Play (Apply Changes) button
The following screenshot displays the steps to create a new visualization for the top 10 requested URLs:
Save the visualization as Top 10 URLs.
Custom Label fields can be used to provide meaningful names for aggregated results. Most of the visualizations support custom labels. Data table visualizations can be exported as a .csv file by clicking the Raw or Formatted links found under the data table visualization.