# Combine 2 or more beats in one panel / visualization

**URL:** https://discuss.elastic.co/t/combine-2-or-more-beats-in-one-panel-visualization/267596
**Category:** Kibana
**Created:** [March 18, 2021, 5:21am UTC](https://discuss.elastic.co/t/combine-2-or-more-beats-in-one-panel-visualization/267596 "2021-03-18T05:21:36Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![alipujaistopo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alipujaistopo/32/50791_2.png) [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)
#### Post date: [March 18, 2021, 5:21am UTC](https://discuss.elastic.co/t/combine-2-or-more-beats-in-one-panel-visualization/267596/1 "2021-03-18T05:21:37Z")

</div>

i have 2 beats. filebeat and auditbeat, can i combine that 2 index in 1 panel visualization.

---

<div class="post-metadata">

### Author: ![matw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matw/32/13913_2.png) [@matw](https://discuss.elastic.co/u/matw)
#### Post date: [March 18, 2021, 7:29am UTC](https://discuss.elastic.co/t/combine-2-or-more-beats-in-one-panel-visualization/267596/2 "2021-03-18T07:29:04Z")

</div>

Hi  
Could you elaborate which kind of visualization you mean? Do you want to view the logs in one panel? you could create an index pattern targeting both beat indices, create a saved search in Discover, add it on a Dashboard.

Best,  
Matthias

---

<div class="post-metadata">

### Author: ![alipujaistopo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alipujaistopo/32/50791_2.png) [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)
#### Post date: [March 18, 2021, 9:39am UTC](https://discuss.elastic.co/t/combine-2-or-more-beats-in-one-panel-visualization/267596/3 "2021-03-18T09:39:27Z")

</div>

the "data table" i mean. in one data table i can choose a source from auditbeat-\* and filebeat-\*

---

<div class="post-metadata">

### Author: ![matw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matw/32/13913_2.png) [@matw](https://discuss.elastic.co/u/matw)
#### Post date: [March 18, 2021, 11:02am UTC](https://discuss.elastic.co/t/combine-2-or-more-beats-in-one-panel-visualization/267596/4 "2021-03-18T11:02:46Z")

</div>

you could create in index pattern `*beat-*` so you would combine both

---

<div class="post-metadata">

### Author: ![alipujaistopo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alipujaistopo/32/50791_2.png) [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)
#### Post date: [March 18, 2021, 12:42pm UTC](https://discuss.elastic.co/t/combine-2-or-more-beats-in-one-panel-visualization/267596/5 "2021-03-18T12:42:25Z")

</div>

how to make it?

---

<div class="post-metadata">

### Author: ![matw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matw/32/13913_2.png) [@matw](https://discuss.elastic.co/u/matw)
#### Post date: [March 22, 2021, 7:36am UTC](https://discuss.elastic.co/t/combine-2-or-more-beats-in-one-panel-visualization/267596/6 "2021-03-22T07:36:08Z")

</div>

You can create one in Stack Management / Index patterns -\> Create index pattern

 ![Bildschirmfoto 2021-03-22 um 08.35.20](https://us1.discourse-cdn.com/elastic/original/3X/1/e/1e9b9fba1243dafcbede8c29b59a45d916de0da4.png)

---

<div class="post-metadata">

### Author: ![matw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matw/32/13913_2.png) [@matw](https://discuss.elastic.co/u/matw)
#### Post date: [March 22, 2021, 7:39am UTC](https://discuss.elastic.co/t/combine-2-or-more-beats-in-one-panel-visualization/267596/7 "2021-03-22T07:39:53Z")

</div>

if you want to match all beat indices you can add it like this:

 ![Bildschirmfoto 2021-03-22 um 08.39.03](https://us1.discourse-cdn.com/elastic/original/3X/7/a/7a658a0b0c0c3fb1be6b053a0af6d4b00f8aba1e.png)

---

<div class="post-metadata">

### Author: ![alipujaistopo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alipujaistopo/32/50791_2.png) [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)
#### Post date: [March 22, 2021, 9:54am UTC](https://discuss.elastic.co/t/combine-2-or-more-beats-in-one-panel-visualization/267596/8 "2021-03-22T09:54:55Z")

</div>

thanks Matthias

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 19, 2021, 9:55am UTC](https://discuss.elastic.co/t/combine-2-or-more-beats-in-one-panel-visualization/267596/9 "2021-04-19T09:55:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.