# Filter ip with pie

**URL:** <https://discuss.elastic.co/t/filter-ip-with-pie/172084>\
**Category:** Kibana\
**Created:** [March 13, 2019, 8:17am UTC](https://discuss.elastic.co/t/filter-ip-with-pie/172084 "2019-03-13T08:17:26Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![nurhambali](https://avatars.discourse-cdn.com/v4/letter/n/3ec8ea/32.png) [@nurhambali](https://discuss.elastic.co/u/nurhambali)\
**Post date:** [March 13, 2019, 8:17am UTC](https://discuss.elastic.co/t/filter-ip-with-pie/172084/1 "2019-03-13T08:17:26Z")

</div>

hi all,

i have problem with multi ip this is my logs :

`attack.src_ip : 36.86.63.182, 223.202.110.11, 36.71.158.217, 182.30.24.21, 103.78.103.49, 180.252.157.49, 180.246.39.42, 139.224.18.42, 207.226.218.72, 223.202.110.11, 180.242.9.127`

whe i create visualize metode terms , ican't sparate the ip **attack.src\_ip** example:

i try add filter ip **223.202.110.11**

 ![trends](https://us1.discourse-cdn.com/elastic/original/3X/e/f/ef8911c71b26a175061ba3fd8b38412930e9c23a.png)

how if i only filter ip **223.202.110.11** thast ip only , any ides my problem?

thanks,  
hambali

---

<div class="post-metadata">

**Author:** ![joshdover](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joshdover/32/42020_2.png) [@joshdover](https://discuss.elastic.co/u/joshdover)\
**Post date:** [March 14, 2019, 9:17pm UTC](https://discuss.elastic.co/t/filter-ip-with-pie/172084/2 "2019-03-14T21:17:04Z")

</div>

Unfortunately, Kibana's support of array fields is a bit lacking in some areas.

If the field on the document is an array, then if any filter matches that document, it will be included in the results (meaning all IPs will be shown).

There may still be a way to accomplish what you're trying to do, but I'm having a hard time understanding what you want the graph to be. If you were to filter by a single IP what do you want the pie chart to display?

---

<div class="post-metadata">

**Author:** ![nurhambali](https://avatars.discourse-cdn.com/v4/letter/n/3ec8ea/32.png) [@nurhambali](https://discuss.elastic.co/u/nurhambali)\
**Post date:** [March 18, 2019, 3:06am UTC](https://discuss.elastic.co/t/filter-ip-with-pie/172084/3 "2019-03-18T03:06:55Z")

</div>

> [@joshdover](#):
>
> will be in

the problem's is i want when i click 1 result ip addrees in the pie kibana, i'am only want the result's is only this ip.

any ides is my problem's ?

thanks,  
hambali

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 15, 2019, 3:06am UTC](https://discuss.elastic.co/t/filter-ip-with-pie/172084/4 "2019-04-15T03:06:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.