I love the querying ability -- it is very robust and allows a lot of flexibility

I love how in depth the query results are. Being able to filter a certain log field is very useful, and something I had not seen before in older version of Kibana. Being able to drag a specific time range in the log visualization tool and have the logs for that time range pop up are very useful. The JSON field formatting is also extremely useful. We use this to trace through logs and have been able to determine the flow of any particular request in our services. This has saved significant amounts of time as opposed to having to trace through entire log entries.

I like their flexible approach to parse fields out of log entries, kind of like linux pipes, to allow you concatenate multiple extraction rules, and aggregate options