# Display Top 20 Results by Event Count

**URL:** <https://discuss.elastic.co/t/display-top-20-results-by-event-count/275492>\
**Category:** Kibana\
**Created:** [June 9, 2021, 7:07pm UTC](https://discuss.elastic.co/t/display-top-20-results-by-event-count/275492 "2021-06-09T19:07:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![nazevedo3](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nazevedo3/32/85199_2.png) [@nazevedo3](https://discuss.elastic.co/u/nazevedo3)\
**Post date:** [June 9, 2021, 7:07pm UTC](https://discuss.elastic.co/t/display-top-20-results-by-event-count/275492/1 "2021-06-09T19:07:31Z")

</div>

Hi All,

I have a dataset that returns data that includes a networks ASN. I'd like to be able to visualize a set of specific ASNs AND the top 20 of all other ASNs in my dataset based on event count. Any suggestions on the best way to approach that?

I appreciate any help in advance!

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [June 15, 2021, 11:32am UTC](https://discuss.elastic.co/t/display-top-20-results-by-event-count/275492/2 "2021-06-15T11:32:31Z")

</div>

You can't really do this is one single visualization, but if you use 2 of them on a dashboard it's easily doable.  
For the specific ASNs, just use a filter aggregation and specify each of them.  
For the other 20, just do a top 20 terms aggregation and set a filter that filters out the ASNs from the first one. I would suggest using TSVB because it has an option called "ignore global filters" so if you add any filters on the dashboard it won't mess with the filters from the visualization.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 13, 2021, 11:33am UTC](https://discuss.elastic.co/t/display-top-20-results-by-event-count/275492/3 "2021-07-13T11:33:29Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.