# Dashboard with a mix of filebeat/packet indices

**URL:** https://discuss.elastic.co/t/dashboard-with-a-mix-of-filebeat-packet-indices/145607
**Category:** Kibana
**Created:** [August 22, 2018, 8:07pm UTC](https://discuss.elastic.co/t/dashboard-with-a-mix-of-filebeat-packet-indices/145607 "2018-08-22T20:07:17Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Rodrigo\_Jimenez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rodrigo_jimenez/32/34722_2.png) [@Rodrigo\_Jimenez](https://discuss.elastic.co/u/Rodrigo_Jimenez)
#### Post date: [August 22, 2018, 8:07pm UTC](https://discuss.elastic.co/t/dashboard-with-a-mix-of-filebeat-packet-indices/145607/1 "2018-08-22T20:07:17Z")

</div>

Hi!  
Recently we had an issue with an app. This app is deployed on a server with filebeat and packetbeat configured. This means that the error log of this app is shipped to an index and packetbeat to another.  
I wanted to create a dashboard that would let me see the errors and traffic generated by this problematic app. The problem that I see with a dashboard with visualization from different indices is that I cant apply filters without breaking half of my data.  
Say that I want to filter only HTTP packetbeat data; I would click the field showing packetbeat data and that would work, but! would show no docs from the filebeat index (since no protocol or port field would exist)

I don't think that the filebeat should contain traffic related fields, and.. viceversa.

Any idea of which could be the right approach for this issue...?

Thanks!

---

<div class="post-metadata">

### Author: ![spalger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spalger/32/14092_2.png) [@spalger](https://discuss.elastic.co/u/spalger)
#### Post date: [August 23, 2018, 2:40pm UTC](https://discuss.elastic.co/t/dashboard-with-a-mix-of-filebeat-packet-indices/145607/2 "2018-08-23T14:40:35Z")

</div>

Unfortunately there isn’t any way to do this, but I know there is a good amount of work going on behind the scenes to make this possible. Track [https://github.com/elastic/kibana/issues/5647](https://github.com/elastic/kibana/issues/5647) for updates.

---

<div class="post-metadata">

### Author: ![Rodrigo\_Jimenez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rodrigo_jimenez/32/34722_2.png) [@Rodrigo\_Jimenez](https://discuss.elastic.co/u/Rodrigo_Jimenez)
#### Post date: [August 23, 2018, 2:53pm UTC](https://discuss.elastic.co/t/dashboard-with-a-mix-of-filebeat-packet-indices/145607/3 "2018-08-23T14:53:30Z")

</div>

Ok, I did my +1's  
Thanks!

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 20, 2018, 2:53pm UTC](https://discuss.elastic.co/t/dashboard-with-a-mix-of-filebeat-packet-indices/145607/4 "2018-09-20T14:53:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
