Professional skills
Data Analysis with Kibana
A 4-day course on analysing data with a visual analytics interface: query, design charts and dashboards, explore time series, maps, ML and alerts.
THE BIG PICTURE
About this course
The Elastic Certified Analyst is a professional certification awarded by Elastic (Elasticsearch B.V.). It validates practical skills in analysing data and building effective visualisations and dashboards in Kibana to support insights and reporting. Across four days, this course covers core analysis workflows: data views, KQL/Lucene search, Lens, Visualize Library, TSVB, dashboards, Maps, alerting, and interpreting machine learning results. You will complete guided labs in a hands-on environment to build charts, dashboards, geo maps, and analysis artefacts that reflect real tasks. The certification exam is set and administered by Elastic. Registration, payment, and scheduling are handled by Elastic, and the exam follows the scope published by Elastic. This course provides structured study support and practice aligned to those areas. Elastic owns the certification scheme. MindClick provides training and exam preparation and is not an accredited or authorised partner.
What you’ll learn
- Create and manage data views, understand field types, and use filters effectively
- Query data with KQL and Lucene, including ranges, nesting, and aggregations
- Design clear charts with Lens and the Visualize Library, applying appropriate aggregations
- Build time series analyses with TSVB, date histograms, moving averages, and annotations
- Construct interactive dashboards with drilldowns, controls, and reporting exports
- Produce geospatial insights using Maps with geo_point and geo_shape data
- Interpret machine learning anomaly results and configure threshold- and query-based alerts
- Prepare for the Elastic Certified Analyst exam with daily practice and a timed mock exam
A CLEAR PATH FORWARD
4-day Data Analysis with Kibana agenda
4 instructor-led days (32 contact hours) mapped to the exam domains. Each day combines short concept sessions, hands-on practice on a running case study and exam-style questions.
- Learning route
- 4 recommended days
- Practical work
- 4 guided activities
- Finish with
- Mock exam + certification exam
Take a look at each day. Open a section to see the topics and practical work.
Day 1Foundations: data views, search, and core visualisationsData views, KQL/Lucene, core Lens charts and dashboards
What we’ll cover
- 09:00–10:30 · Course orientation; Kibana workspace tour; creating and managing data views; field types and runtime fields
- 10:45–12:15 · Searching with KQL: fields, operators, ranges, nesting; filters vs queries; saved searches
- 13:15–14:30 · Lens fundamentals: bar/line/area charts, aggregations, breakdowns, and formatting
- 14:45–15:45 · Building first dashboards: panels, layout, controls, and saved objects
- 16:00–16:45 · Exam-style practice questions: KQL scenarios and Lens chart selection
- 16:45–17:30 · Lab consolidation and Q&A; tidy-up of saved searches, visualisations, and a starter dashboard
Put it into practice
Hands-on lab: import a sample dataset, define a data view, and build a starter dashboard with three Lens panels using filters and breakdowns. Submit your saved objects export for review.
You’ll take away
Starter dashboard with saved searches and Lens visualisations
Day 2Time series and advanced chartingAggregations, TSVB/time series, advanced Lens and Visualize Library
What we’ll cover
- 09:00–10:30 · Recap of Day 1; aggregation choices and pitfalls; date histograms and bucket sizing
- 10:45–12:15 · TSVB essentials: series grouping, pipeline aggregations, moving averages, and annotations
- 13:15–14:30 · Advanced Lens techniques: formulas, multiple layers, reference lines, and thresholds
- 14:45–15:45 · Visualize Library patterns: gauges, heat maps, and when to use them
- 16:00–16:45 · Exam-style practice questions: choose the right visual and aggregation for a given scenario
- 16:45–17:30 · Lab clinic and peer review of time series dashboards
Put it into practice
Hands-on lab: create a time series dashboard combining TSVB and multi-layer Lens panels to explain a KPI trend with context and annotations. Share the dashboard for peer feedback.
You’ll take away
Time series dashboard with TSVB and advanced Lens panels
Day 3Geo analysis, ML results, and alertingMaps, ML results exploration, and alerting workflows
What we’ll cover
- 09:00–10:30 · Recap of Day 2; geo_point vs geo_shape; building Maps layers and styling
- 10:45–12:15 · Interactivity: joins, filters, tooltips, and linking Maps panels into dashboards
- 13:15–14:30 · Exploring machine learning results: Anomaly Explorer and Single Metric Viewer
- 14:45–15:45 · Alerting in Kibana: rule types, conditions, actions, and managing alert lifecycle
- 16:00–16:45 · Exam-style practice questions: interpret ML results and design appropriate alerts
- 16:45–17:30 · Lab wrap-up: publish a geo-enabled dashboard with contextual alerts
Put it into practice
Hands-on lab: build a geo dashboard combining point and shape layers, then add an alert that notifies when a key metric deviates from normal behaviour using ML results for context.
You’ll take away
Geo-enabled dashboard with configured alerts
Day 4Advanced workflows, presentation, and exam preparationDashboards, drilldowns, reporting, governance, and exam readiness
What we’ll cover
- 09:00–10:30 · Recap of Days 1–3; dashboard design principles, accessibility, and governance
- 10:45–12:15 · Drilldowns, navigation, and dashboard controls for guided analysis
- 13:15–14:30 · Reporting and sharing: scheduled reports, exports, and space management
- 14:45–15:45 · Timed mock exam (part 1): practical tasks aligned to exam domains
- 16:00–16:45 · Timed mock exam (part 2) and quick review of solutions
- 16:45–17:30 · Exam booking guidance, policies overview, personal study plan, and next steps
Put it into practice
Hands-on lab: assemble a presentation-ready dashboard with drilldowns and a scheduled report, then complete a timed mock exam covering all domains. Debrief to identify final study actions.
You’ll take away
Presentation-ready dashboard and personal exam study plan
Bring it all together
Certification exam: Elastic Certified Analyst, awarded by Elastic. Confirm the current exam format with the awarding body when you book. Every attendee also receives a MindClick certificate of completion for 32 contact hours.
What you receive
You earn two separate credentials. The sample shows the MindClick training certificate.
- MindClick certificate of completion: 4 days, 32 contact hours, issued to every attendee who completes the course.
- Elastic Certified Analyst: issued by Elastic when you meet its requirements and pass the exam.
Before you choose your learning route
Session timings are indicative; the trainer may adjust them for the group. Exam details reflect the awarding body’s published information at the time of writing; confirm the current version when you book.
Elastic owns this certification scheme. MindClick provides training and exam preparation and is not an accredited or authorised partner of Elastic.
Fees
| Delivery format | Fee per learner | Exam fee |
|---|---|---|
| Live online | $2,800 USD | Included |
| Classroom | $4,500 USD | Included |
One awarding-body certification exam attempt is included in the training fee. Confirm the current fee, any applicable tax and what the fee covers in writing before you pay.
Prerequisites
- No formal prerequisites are published by the awarding body. We recommend basic familiarity with Kibana, JSON, and Elasticsearch concepts, plus 6 months of practical use. Bring a laptop with a modern browser and Wi‑Fi; lab data and instructions are provided.
Who is this course for?
- Data analysts building dashboards and reports on Elasticsearch data.
- Security and operations analysts who investigate events in Kibana.
- Business professionals who need self-service analysis and reporting.
- Analysts preparing for the Elastic Certified Analyst exam.
FIND YOUR START
Confirmed batch starts
Choose a published start, then review your offer in the same enrollment flow. A start date is not the full timetable or a seat reservation.
Choose your country & monthStarts
- Training location
- Manama, Bahrain
- Local timezone
- Asia/Bahrain
Venue and full session timetable to be supplied.
Starts
- Training location
- Cairo, Egypt
- Local timezone
- Africa/Cairo
Venue and full session timetable to be supplied.
Starts
- Training location
- Kuwait City, Kuwait
- Local timezone
- Asia/Kuwait
Venue and full session timetable to be supplied.
Starts
- Training location
- Muscat, Oman
- Local timezone
- Asia/Muscat
Venue and full session timetable to be supplied.
Starts
- Training location
- Doha, Qatar
- Local timezone
- Asia/Qatar
Venue and full session timetable to be supplied.
Starts
- Training location
- Riyadh, Saudi Arabia
- Local timezone
- Asia/Riyadh
Venue and full session timetable to be supplied.
Frequently asked questions
How long is the course?
4 days, 32 contact hours, normally 09:00 to 17:30 with breaks. The agenda follows the exam domains and the final day includes a mock exam.
Is the exam included?
Yes. Outside India the fee includes one certification exam attempt. Retakes are booked and paid directly with the awarding body.
What does this course cost?
Outside India this 4-day course is listed at USD 2,800 per learner for live online delivery and USD 4,500 for classroom delivery. Both fees include one certification exam attempt. Pricing for India is confirmed separately by an advisor. Taxes and the final offer are confirmed in writing before you pay.
Are there prerequisites?
No formal prerequisites are published by the awarding body. We recommend basic familiarity with Kibana, JSON, and Elasticsearch concepts, plus 6 months of practical use. Bring a laptop with a modern browser and Wi‑Fi; lab data and instructions are provided.
What certificate will I receive?
Two credentials. MindClick issues a certificate of completion for 32 contact hours to every attendee. Elastic issues the Elastic Certified Analyst certification when you pass the exam and meet its requirements.
Is MindClick an accredited training partner for this certification?
MindClick provides training and exam preparation and is not an accredited/authorised partner of Elastic; the certification exam is purchased and administered by Elastic.
Where is classroom training delivered?
Singapore and Dubai are the priority classroom markets for this catalog. Classroom delivery is also available in the other listed countries, and live online delivery is available everywhere. Venues are confirmed per booking; a listed city is a training market, not an owned campus.
KEEP EXPLORING
More ways to move forward.
Related training from the course catalog.
Elasticsearch Engineer Training
This 4-day course builds practical skills in designing, indexing, querying, scaling, and operating a distributed search and analytics system.
Elastic Observability Engineer Training
A 4-day course where you ingest logs, metrics and traces, analyse them in dashboards, set alerts, and practise end-to-end incident workflows.
Elastic Security for SIEM
Four-day, 32-hour course to ingest data, query events, build dashboards, triage alerts, and hunt threats in a modern SIEM.
Elastic Security for Endpoint
Investigate host-based alerts from Elastic Defend, enrich security data, and hunt threats on the endpoint.