# Elasticsearch time chart

**URL:** https://discuss.elastic.co/t/elasticsearch-time-chart/98532
**Category:** Elasticsearch
**Created:** [August 28, 2017, 9:48am UTC](https://discuss.elastic.co/t/elasticsearch-time-chart/98532 "2017-08-28T09:48:41Z")
**Posts on this page:** 10
**Page:** 1

<div class="post-metadata">

### Author: ![Akhil\_Prashar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhil_prashar/32/20313_2.png) [@Akhil\_Prashar](https://discuss.elastic.co/u/Akhil_Prashar)
#### Post date: [August 28, 2017, 9:48am UTC](https://discuss.elastic.co/t/elasticsearch-time-chart/98532/1 "2017-08-28T09:48:41Z")

</div>

I would like to create a time chart which searches a keyword through multiple indexes and finally forms a graph which shows the repetition of keyword through days. Can anyone help me with how to do this?

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [August 28, 2017, 9:52am UTC](https://discuss.elastic.co/t/elasticsearch-time-chart/98532/2 "2017-08-28T09:52:23Z")

</div>

Yes, we can.

You will need to use Logstash, or similar, to structure the data and extract things like timestamp and the text into their own fields. Then use Kibana to build a graph.

---

<div class="post-metadata">

### Author: ![Akhil\_Prashar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhil_prashar/32/20313_2.png) [@Akhil\_Prashar](https://discuss.elastic.co/u/Akhil_Prashar)
#### Post date: [August 28, 2017, 9:56am UTC](https://discuss.elastic.co/t/elasticsearch-time-chart/98532/3 "2017-08-28T09:56:46Z")

</div>

Thanks Mark, actually I am new to elasticsearch. Could you please explain a bit in detail or if you can provide me any link of tutorial or example so that I can understand things clearly?

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [August 29, 2017, 11:19pm UTC](https://discuss.elastic.co/t/elasticsearch-time-chart/98532/4 "2017-08-29T23:19:35Z")

</div>

I'd suggested you start with [https://www.elastic.co/guide/en/logstash/5.5/getting-started-with-logstash.html](https://www.elastic.co/guide/en/logstash/5.5/getting-started-with-logstash.html), learn the basics and then come back to us with further questions 🙂

---

<div class="post-metadata">

### Author: ![Akhil\_Prashar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhil_prashar/32/20313_2.png) [@Akhil\_Prashar](https://discuss.elastic.co/u/Akhil_Prashar)
#### Post date: [August 30, 2017, 8:07am UTC](https://discuss.elastic.co/t/elasticsearch-time-chart/98532/5 "2017-08-30T08:07:01Z")

</div>

Hi Mark I have studied the link provided by you. I have installed logstash and filebeat. Now there is a thing that when we have to give the path of log files I am not able to understand what path should I give. As I have text files which I have indexed in elasticsearch and displaying the results via php interface.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [August 30, 2017, 8:10am UTC](https://discuss.elastic.co/t/elasticsearch-time-chart/98532/6 "2017-08-30T08:10:40Z")

</div>

If you have data in Elasticsearch already then install Kibana and see what you can build.  
eg [https://www.elastic.co/guide/en/kibana/5.5/getting-started.html](https://www.elastic.co/guide/en/kibana/5.5/getting-started.html), but you can skip the loading data part.

---

<div class="post-metadata">

### Author: ![Akhil\_Prashar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhil_prashar/32/20313_2.png) [@Akhil\_Prashar](https://discuss.elastic.co/u/Akhil_Prashar)
#### Post date: [August 30, 2017, 8:13am UTC](https://discuss.elastic.co/t/elasticsearch-time-chart/98532/7 "2017-08-30T08:13:53Z")

</div>

Yes I have data in elasticsearch. Does that mean I do not need logstash and filebeat?

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [August 30, 2017, 8:40am UTC](https://discuss.elastic.co/t/elasticsearch-time-chart/98532/8 "2017-08-30T08:40:09Z")

</div>

No you don't.

---

<div class="post-metadata">

### Author: ![Akhil\_Prashar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhil_prashar/32/20313_2.png) [@Akhil\_Prashar](https://discuss.elastic.co/u/Akhil_Prashar)
#### Post date: [August 30, 2017, 11:45am UTC](https://discuss.elastic.co/t/elasticsearch-time-chart/98532/9 "2017-08-30T11:45:03Z")

</div>

Thanks mate.  
You are a gem

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 27, 2017, 11:45am UTC](https://discuss.elastic.co/t/elasticsearch-time-chart/98532/10 "2017-09-27T11:45:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
