# Filterable Search Boxes

**URL:** https://discuss.elastic.co/t/filterable-search-boxes/46607
**Category:** Kibana
**Created:** [April 6, 2016, 9:30pm UTC](https://discuss.elastic.co/t/filterable-search-boxes/46607 "2016-04-06T21:30:12Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![SecurityN00b](https://avatars.discourse-cdn.com/v4/letter/s/f4b2a3/32.png) [@SecurityN00b](https://discuss.elastic.co/u/SecurityN00b)
#### Post date: [April 6, 2016, 9:30pm UTC](https://discuss.elastic.co/t/filterable-search-boxes/46607/1 "2016-04-06T21:30:12Z")

</div>

I have indexed our firewall syslogs. I am wondering if it's possible to create a dashboard with text boxes that would apply filters. For example, there would be src\_IP, dst\_IP, src\_Port, dst\_Port, etc.... boxes that would filter on any of the fields. If the text box was blank, it would act like an \* for that field.

---

<div class="post-metadata">

### Author: ![Joe\_Fleming](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joe_fleming/32/3561_2.png) [@Joe\_Fleming](https://discuss.elastic.co/u/Joe_Fleming)
#### Post date: [April 6, 2016, 10:06pm UTC](https://discuss.elastic.co/t/filterable-search-boxes/46607/2 "2016-04-06T22:06:30Z")

</div>

We don't have a UI like that, but you can achieve the same thing a couple different ways:

- You can apply the queries you need to the query bar at the top, for example `src_IP:10.0.0.1` or whatever it is you need to search for. You can also leave all the fields there by using `*` as the query value, like `src_IP:* AND dst_IP:* AND ...`
- You can add filters for each of the fields you need, and enabled/disable the fields as needed. You can also use the editor to change the values as needed.

 ![](https://us1.discourse-cdn.com/elastic/original/2X/a/a1028e091152971c18e2edcf3c6f8647c24795f5.png)  
This is from Kibana 5, but the interface is the same in 4.x, and I think the feature was added in 4.2 or 4.3.

---

<div class="post-metadata">

### Author: ![SecurityN00b](https://avatars.discourse-cdn.com/v4/letter/s/f4b2a3/32.png) [@SecurityN00b](https://discuss.elastic.co/u/SecurityN00b)
#### Post date: [April 6, 2016, 10:24pm UTC](https://discuss.elastic.co/t/filterable-search-boxes/46607/3 "2016-04-06T22:24:38Z")

</div>

Hi Joe,

Thanks for the response. I was hoping to eventually create an aggregator that could combine multiple sources of logs and create a unified 'source\_ip' field (instead of having to remember each identifier for each source). Is there a way to request this sort of functionality in the future?

---

<div class="post-metadata">

### Author: ![Joe\_Fleming](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joe_fleming/32/3561_2.png) [@Joe\_Fleming](https://discuss.elastic.co/u/Joe_Fleming)
#### Post date: [April 6, 2016, 11:17pm UTC](https://discuss.elastic.co/t/filterable-search-boxes/46607/4 "2016-04-06T23:17:50Z")

</div>

Absolutely, feel free to open an [issue in the repo](https://github.com/elastic/kibana/issues). It's a neat idea for sure. Be sure to provide as much detail as possible.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:56pm UTC](https://discuss.elastic.co/t/filterable-search-boxes/46607/5 "2017-07-06T13:56:46Z")

</div>


