# Combining metricbeat and filebeat data

**URL:** https://discuss.elastic.co/t/combining-metricbeat-and-filebeat-data/159372
**Category:** Kibana
**Created:** [December 4, 2018, 1:56pm UTC](https://discuss.elastic.co/t/combining-metricbeat-and-filebeat-data/159372 "2018-12-04T13:56:49Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![LucaZ92](https://avatars.discourse-cdn.com/v4/letter/l/6f9a4e/32.png) [@LucaZ92](https://discuss.elastic.co/u/LucaZ92)
#### Post date: [December 4, 2018, 1:56pm UTC](https://discuss.elastic.co/t/combining-metricbeat-and-filebeat-data/159372/1 "2018-12-04T13:56:49Z")

</div>

Hi,

I have data of cpu usage in time(from metricbeat and sent to elastisearch directly) and some variable also changing in time taken from filebeat, parsed in logstash and sent to elastic search.

Now i want to combine these two measurements on one graph.

What should i do?

---

<div class="post-metadata">

### Author: ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)
#### Post date: [December 4, 2018, 5:13pm UTC](https://discuss.elastic.co/t/combining-metricbeat-and-filebeat-data/159372/2 "2018-12-04T17:13:57Z")

</div>

You can use timelion or Visual Builder to display multiple index-patterns in the same visualization.

If the document structure is the same between the 2 data sources, you could create an index naming scheme that allows for using both indices in a single index-pattern. For example, you could name the index from metricbeat `beat-metric` and the index from filebeat `beat-file` and then create a kibana index-pattern `beat-*` that will include both indices.

Thanks,  
Nathan

---

<div class="post-metadata">

### Author: ![LucaZ92](https://avatars.discourse-cdn.com/v4/letter/l/6f9a4e/32.png) [@LucaZ92](https://discuss.elastic.co/u/LucaZ92)
#### Post date: [December 6, 2018, 2:20pm UTC](https://discuss.elastic.co/t/combining-metricbeat-and-filebeat-data/159372/3 "2018-12-06T14:20:24Z")

</div>

Timelion suited exactly for my issue 😃. Thanks for help 🙂

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 3, 2019, 2:20pm UTC](https://discuss.elastic.co/t/combining-metricbeat-and-filebeat-data/159372/4 "2019-01-03T14:20:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.