# Charting an IP flow based metric

**URL:** <https://discuss.elastic.co/t/charting-an-ip-flow-based-metric/97257>\
**Category:** Kibana\
**Created:** [August 16, 2017, 12:43pm UTC](https://discuss.elastic.co/t/charting-an-ip-flow-based-metric/97257 "2017-08-16T12:43:16Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [August 16, 2017, 7:35pm UTC](https://discuss.elastic.co/t/charting-an-ip-flow-based-metric/97257/2 "2017-08-16T19:35:34Z")

</div>

I think this post would help you;

> [@Aggregate multiple records to single chart](https://discuss.elastic.co/t/aggregate-multiple-records-to-single-chart/86561/23):
>
> Hi Avivc, You still haven't posted example data such that I can understand your question, so I'm making some up. In the Dev Console I did this; POST my\_index/defect/ { "Project.\_refObjectName": "value1" } POST my\_index/defect/ { "Project.\_refObjectName": "value2" } POST my\_index/defect/ { "Project.\_refObjectName": "value3" } POST my\_index/defect/ { "Project.\_refObjectName": "value4" } POST my\_index/defect/ { "Project.\_refObjectName": "value5" } POST my\_index…

Specifically, look for this;  
`Project._refObjectName.keyword=value1 OR Project._refObjectName.keyword=value2`

Regards,  
Lee

---

_[View the full topic](https://discuss.elastic.co/t/charting-an-ip-flow-based-metric/97257)._