# Custom Visualisation **URL:** \ **Category:** Kibana\ **Created:** [April 29, 2021, 10:59am UTC](https://discuss.elastic.co/t/custom-visualisation/271623 "2021-04-29T10:59:05Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![mralladin](https://avatars.discourse-cdn.com/v4/letter/m/2acd7d/32.png) [@mralladin](https://discuss.elastic.co/u/mralladin)\ **Post date:** [April 29, 2021, 10:59am UTC](https://discuss.elastic.co/t/custom-visualisation/271623/1 "2021-04-29T10:59:05Z")
Hello I hope this is the correct category for my question and I wonder if this is even realisable in elastic. I want to create a custom visualisation for monitoring our interfaces as following: With filebeat I read the .log files and in case there is a special keyword (i.e. Error) inside the Logs the Visualisation will turn to red and even a mail will be send. Once the Logfiles are archived and the interface is restartet this will turn to green again. Currently we use incinga to monitor on the same way. Of course if you have a better way I am open minded. ![Screenshot 2021-04-29 125717](https://us1.discourse-cdn.com/elastic/original/3X/7/2/726ec4130cf65acb17df7fcd3a24287bc4ea0b3d.png) Maybe some kind of scripting is possible/necessary but I am quite new to Elastic. Thank you very much for your help. ---
**Author:** ![jsanz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsanz/32/53734_2.png) [@jsanz](https://discuss.elastic.co/u/jsanz)\ **Post date:** [May 4, 2021, 11:50am UTC](https://discuss.elastic.co/t/custom-visualisation/271623/2 "2021-05-04T11:50:44Z")
@mralladin have you checked Elastic [Observability](https://www.elastic.co/guide/en/kibana/current/observability.html)? In the Logs application, you can set up Alerts based in different conditions, triggering different types of actions including sending emails. A screenshot taking data from packetbeat to email if there are any DNS requests to `mail.google.com` over the last five minutes, checking every minute ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/5/b5ff3b0b0bad109c21a20b971385d3babb3e00c3.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/e/de6832ea4cc9abe14e3d767274547ef77327e878.png) If you want to create your own visualization I guess you can combine Transforms to create an aggregation of the search for your keyword and then create a Dashboard or Canvas that presents the result of that aggregation. The tricky part (that Kibana Alerts handle) is how to handle the "restarting" logic. ---
**Author:** ![mralladin](https://avatars.discourse-cdn.com/v4/letter/m/2acd7d/32.png) [@mralladin](https://discuss.elastic.co/u/mralladin)\ **Post date:** [May 4, 2021, 12:22pm UTC](https://discuss.elastic.co/t/custom-visualisation/271623/3 "2021-05-04T12:22:43Z")
Thx I will have a look. I was more used with this Kibana Dashboards, but I guess I am pretty limited there. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 1, 2021, 12:22pm UTC](https://discuss.elastic.co/t/custom-visualisation/271623/4 "2021-06-01T12:22:57Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.