# Exclude global Querystring for Visualizations

**URL:** <https://discuss.elastic.co/t/exclude-global-querystring-for-visualizations/31836>\
**Category:** Kibana\
**Created:** [October 8, 2015, 11:19am UTC](https://discuss.elastic.co/t/exclude-global-querystring-for-visualizations/31836 "2015-10-08T11:19:30Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![german23](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/german23/32/11052_2.png) [@german23](https://discuss.elastic.co/u/german23)\
**Post date:** [October 8, 2015, 11:19am UTC](https://discuss.elastic.co/t/exclude-global-querystring-for-visualizations/31836/1 "2015-10-08T11:19:30Z")

</div>

Hey guys,

just a simple question form an former Kibana3 user:

In Kibana3 you had the possibility the select which global dashboard queries should apply to each visualization/panel, is it possible to do the same in Kibana4 dashboards?

So that the visualization A and B use the global dashboard querystring, but visualization C is just using the settings, that are configured in the visualization itself.

Thanks in advance

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [October 10, 2015, 2:32pm UTC](https://discuss.elastic.co/t/exclude-global-querystring-for-visualizations/31836/2 "2015-10-10T14:32:09Z")

</div>

Yes. When you create the visualization, you can link it to an index (which will utilize the search bar for ad-hoc queries) or you can select a saved search, which will pin the vis only to that search. In dashboard, you can mix-and-match both types of visualizations.

![](https://us1.discourse-cdn.com/elastic/original/2X/3/31e3549ad4ed57c6b3b59d03420904bcc49f56f4.png)

![](https://us1.discourse-cdn.com/elastic/original/2X/2/2194504f296a8c4e4e236c4f55a297fc16d9a750.png)

---

<div class="post-metadata">

**Author:** ![german23](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/german23/32/11052_2.png) [@german23](https://discuss.elastic.co/u/german23)\
**Post date:** [October 12, 2015, 6:40am UTC](https://discuss.elastic.co/t/exclude-global-querystring-for-visualizations/31836/3 "2015-10-12T06:40:16Z")

</div>

Thanks for taking time to do such an detailed answer.

Unfortunately thats not working, as it should - my example:

First im gonna save the search:

![](https://us1.discourse-cdn.com/elastic/original/2X/2/28197d8e56c102bf687f725f2fb0d8cf50be82e7.PNG)

Next im gonna create an visualization and link it to the "Netflow" search:

 ![](https://us1.discourse-cdn.com/elastic/original/2X/4/4b6c3c4f56531244f2dcd800717ca6e9005d9ab8.PNG)

Creating a Dashboard with the "\*" Query work:

 ![](https://us1.discourse-cdn.com/elastic/original/2X/7/783057d7727ee99c0c2e991b598469dbbf03d417.PNG)

But as soon as i apply a query which excludes the saved search, the visualization is not showing results:

 ![](https://us1.discourse-cdn.com/elastic/original/2X/6/6ad6cfe6067d9db331e37bde711dc5afaf0381df.PNG)

Am I missing something?

Thanks

---

<div class="post-metadata">

**Author:** ![german23](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/german23/32/11052_2.png) [@german23](https://discuss.elastic.co/u/german23)\
**Post date:** [October 26, 2015, 8:12am UTC](https://discuss.elastic.co/t/exclude-global-querystring-for-visualizations/31836/4 "2015-10-26T08:12:57Z")

</div>

Any ideas on this?

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [November 5, 2015, 6:11am UTC](https://discuss.elastic.co/t/exclude-global-querystring-for-visualizations/31836/5 "2015-11-05T06:11:54Z")

</div>

Yeah, you're right. I don't think it quite works as expected. The global filter still applies to all dashboards.

Please feel free to file an issue - I think the scenario makes sense: [https://github.com/elastic/kibana/issues](https://github.com/elastic/kibana/issues)

---

<div class="post-metadata">

**Author:** ![german23](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/german23/32/11052_2.png) [@german23](https://discuss.elastic.co/u/german23)\
**Post date:** [November 6, 2015, 9:03am UTC](https://discuss.elastic.co/t/exclude-global-querystring-for-visualizations/31836/6 "2015-11-06T09:03:09Z")

</div>

Regarding to [https://github.com/elastic/kibana/issues/5324](https://github.com/elastic/kibana/issues/5324) it seems like this is intended behaviour, so this post can be closed.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:09pm UTC](https://discuss.elastic.co/t/exclude-global-querystring-for-visualizations/31836/7 "2017-07-06T14:09:41Z")

</div>


