# Create network usage graph

**URL:** <https://discuss.elastic.co/t/create-network-usage-graph/333904>\
**Category:** Kibana\
**Created:** [May 20, 2023, 11:08am UTC](https://discuss.elastic.co/t/create-network-usage-graph/333904 "2023-05-20T11:08:45Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mark\_Collins](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mark_collins/32/121241_2.png) [@Mark\_Collins](https://discuss.elastic.co/u/Mark_Collins)\
**Post date:** [May 20, 2023, 11:08am UTC](https://discuss.elastic.co/t/create-network-usage-graph/333904/1 "2023-05-20T11:08:45Z")

</div>

Sorry if this has been asked before but I am monitoring some of our network switches via snmp call every 30 seconds and logstash  
The information I am getting back from the switches is the cumlative bytes on the network port, what I would like to do is graph the difference between the records  
for example  
00:00:30 cumlative bytes in for port 1 is 1000  
00:01:00 cumlative bytes in for port 1 is 2000  
00:01:30 cumlative bytes in for port 1 is 2200  
Is it possible to show a graph that would show 1000 and 200 as the data points as this is the difference between the previous record.  
I hope I have explained this OK  
Thanks

---

<div class="post-metadata">

**Author:** ![jsanz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsanz/32/53734_2.png) [@jsanz](https://discuss.elastic.co/u/jsanz)\
**Post date:** [May 30, 2023, 2:27pm UTC](https://discuss.elastic.co/t/create-network-usage-graph/333904/2 "2023-05-30T14:27:12Z")

</div>

In Lens you can use the `Differences` function to do that. Mind that Lens (and almost everywhere in Kibana) is all about **aggregation** , not individual documents.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/6/5649f19bf48792bd632802665e8c4f1ed7cad551.png)

So for the `Kibana Sample Data eCommerce` data view you can for example render a table with the median of `product.prize` and then the difference with the previous value.

In the case of the table viz you can even render your cells per value to higlight positive or negative values and so on.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/f/2f2075f393a8a1178176149a233115592c4dafbb.png)  
k

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 27, 2023, 2:27pm UTC](https://discuss.elastic.co/t/create-network-usage-graph/333904/3 "2023-06-27T14:27:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.