# Compare data that appears on 2 specific days **URL:** \ **Category:** Kibana\ **Created:** [December 13, 2017, 6:29pm UTC](https://discuss.elastic.co/t/compare-data-that-appears-on-2-specific-days/111624 "2017-12-13T18:29:37Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![motts](https://avatars.discourse-cdn.com/v4/letter/m/839c29/32.png) [@motts](https://discuss.elastic.co/u/motts)\ **Post date:** [December 13, 2017, 6:29pm UTC](https://discuss.elastic.co/t/compare-data-that-appears-on-2-specific-days/111624/1 "2017-12-13T18:29:37Z")
Hi there, I am looking for the best way to go about comparing data between some IP's. What I want to happen is that I only see an IP address if that IP appears on both specific days. I can sort of do that in a bar graph. I make the X axis the IP and then sub buckets for the days, but data that only has one day is still showing. I have 2 separate files uploaded into Elastic Stack. One of the Dates is for December and the other is for November, so maybe something basically saying: if IP is in "December" and "November" then display on chart Do you have a way you recommend I present the data as I generically described 😄 ? (Kibana 4.5) Thanks ---
**Author:** ![Shwetank](https://avatars.discourse-cdn.com/v4/letter/s/c6cbf5/32.png) [@Shwetank](https://discuss.elastic.co/u/Shwetank)\ **Post date:** [December 13, 2017, 7:19pm UTC](https://discuss.elastic.co/t/compare-data-that-appears-on-2-specific-days/111624/2 "2017-12-13T19:19:01Z")
Are you trying to compare same data for different time period ? Timelion is good way to try that. Check below post [Timelion](https://discuss.elastic.co/t/compare-two-periods-in-kibana/109937) ---
**Author:** ![motts](https://avatars.discourse-cdn.com/v4/letter/m/839c29/32.png) [@motts](https://discuss.elastic.co/u/motts)\ **Post date:** [December 13, 2017, 7:38pm UTC](https://discuss.elastic.co/t/compare-data-that-appears-on-2-specific-days/111624/3 "2017-12-13T19:38:53Z")
Basically. In the bar graph visualization for instance, I can type in the search bar Date: 29-Nov-17 Date: 5-Dec-17 and that will display IPs from those two dates. I have the X axis with IPs, Y axis with Unique Count of the IPs, and a sub bucket with the dates. What I want to see is ONLY the IPs that appear on BOTH days. ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/6/76483bc061ed9be99a04f2d43e8d605b540382b0.png) As you can see there, some of the IPs along the bottom only show up on the one day while the ones with the green on the bottom and blue on the top represent the IP showing on both days. I'd like to only see the IP's that show up on both days. Many thanks in advance. ---
**Author:** ![motts](https://avatars.discourse-cdn.com/v4/letter/m/839c29/32.png) [@motts](https://discuss.elastic.co/u/motts)\ **Post date:** [December 14, 2017, 2:19pm UTC](https://discuss.elastic.co/t/compare-data-that-appears-on-2-specific-days/111624/4 "2017-12-14T14:19:48Z")
AH! I got something 😄 I did a line chart with the following details: Y-Axis: Date with aggregation Unique Count X-Axis: IP ordered by Custom Metric - Unique Count by Date, Descending Split Chart by Rows: with the Date field, Descending ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/2/e206ae2e1b4a8c368d9e08cea0a25a25f5edd2bb.png) As you can see in the image, there is one IP that hit on 4 days and 21 other address that hit in November and December. It also shows other IPs that have hits on one day and not the other based of where the node is for that date. If anyone has any questions about the chart, feel free to comment and I will reply when I can. Thanks ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 11, 2018, 2:19pm UTC](https://discuss.elastic.co/t/compare-data-that-appears-on-2-specific-days/111624/5 "2018-01-11T14:19:58Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.