# Creating a VM Status Table - Visualization

**URL:** https://discuss.elastic.co/t/creating-a-vm-status-table-visualization/144775
**Category:** Kibana
**Created:** [August 16, 2018, 7:16pm UTC](https://discuss.elastic.co/t/creating-a-vm-status-table-visualization/144775 "2018-08-16T19:16:54Z")
**Posts on this page:** 1
**Showing post:** 4

<div class="post-metadata">

### Author: ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)
#### Post date: [August 28, 2018, 1:28pm UTC](https://discuss.elastic.co/t/creating-a-vm-status-table-visualization/144775/4 "2018-08-28T13:28:06Z")

</div>

It looks like the beats don't have a way to do updates. So you would have to have your beats (or only the ones where you want a current status index) to Logstash and let it write to your Elasticsearch.

Here's one other post where a user is doing updates;

> [@Logstash Update a document in elasticsearch](https://discuss.elastic.co/t/logstash-update-a-document-in-elasticsearch/74039):
>
> Trying to update a specific field in elasticsearch through logstash. Is it possible to update only a set of fields through logstash ? Please find the code below, filter { csv { separator =\> "|" columns =\> ["NAME","ID","COUNTRYNAME","DATE","STATECODE", "G\_NAME","G\_ID","G\_COUNTRYNAME"," G\_DATE","G\_STATECODE"] } ruby { code =\> " hash = event.to\_hash hash.each do |k,v| if v == nil event.remove(k) end end " } } We are using the above configuration when we use this the null value fi…

and another;

> [@Updating documents with Elasticsearch output](https://discuss.elastic.co/t/updating-documents-with-elasticsearch-output/91898/):
>
> I'm trying to figure out how to update documents properly using the Elasticsearch output. Documentation on this issue is very confusing. I have a document that might already be in Elasticsearch, and if so I would like to update it. Going over the documentation I see that there are multiple options for updating documents. So for example this is my current configuration: if [doc\_id] { elasticsearch { hosts =\> ["http://elastic:9200"] document\_type =\> "log" document\_id =\> "%{doc\_id}…

I'm sorry that neither of those seems very clear.

If you want to post some data I could see if there's a way to get the table you're looking for without having to use Logstash to create another index.

---

_[View the full topic](https://discuss.elastic.co/t/creating-a-vm-status-table-visualization/144775)._