# Group results in visualization

**URL:** https://discuss.elastic.co/t/group-results-in-visualization/350735
**Category:** Kibana
**Created:** [January 10, 2024, 11:07am UTC](https://discuss.elastic.co/t/group-results-in-visualization/350735 "2024-01-10T11:07:58Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![KaBergmanis](https://avatars.discourse-cdn.com/v4/letter/k/43a26b/32.png) [@KaBergmanis](https://discuss.elastic.co/u/KaBergmanis)
#### Post date: [January 10, 2024, 11:07am UTC](https://discuss.elastic.co/t/group-results-in-visualization/350735/1 "2024-01-10T11:07:58Z")

</div>

Hello!

I've set up search that pulls out OS versions from VPN data feed. All working as expected.  
Then I created pie chart showing count of OS versions, again, so far so good, please see attached.

Issue: There are multiple wordings for same value , for example, "MacOS X 14" and "MacOS X 13".

Desired result: to be able to group OS by major categories, for example:

- Windows 10
- Windows 10
- MacOS X
- Android  
or should the business need arise:
- MacOS X 14
- MacOS X 13
- MacOS X 12  
etc.

 ![Ekrānuzņēmums 2024-01-10 130349](https://us1.discourse-cdn.com/elastic/original/3X/1/8/186662b4776e5d2e75ff58bf926ba3364b6e1be5.png)

---

<div class="post-metadata">

### Author: ![Priscilla\_Parodi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/priscilla_parodi/32/43047_2.png) [@Priscilla\_Parodi](https://discuss.elastic.co/u/Priscilla_Parodi)
#### Post date: [January 11, 2024, 1:01am UTC](https://discuss.elastic.co/t/group-results-in-visualization/350735/2 "2024-01-11T01:01:56Z")

</div>

Hello @KaBergmanis, welcome to the community!

If I understood correctly, you probably want a `filters` function.

 ![Screen Shot 2024-01-10 at 7.57.43 PM](https://us1.discourse-cdn.com/elastic/original/3X/9/9/99697d8adcba8ad56a0cf09cb0663422a590d6cb.jpeg)

In this case, I grouped the data based on whether it is Cairo or Dubai, considering them as one group, and Abu Dhabi or Istanbul as another group. You can observe that the values are divided by these groups instead of by Cairo, Dubai, Abu Dhabi, or Istanbul.

 ![Screen Shot 2024-01-10 at 8.01.30 PM](https://us1.discourse-cdn.com/elastic/original/3X/4/f/4f7c7dbedb9906cf0f7423c9ae513c5636cdff4b.png)

 ![Screen Shot 2024-01-10 at 8.02.38 PM](https://us1.discourse-cdn.com/elastic/original/3X/7/0/709cb88ca3885ae7fc6884e4052bdcff0dd6f741.png)

---

<div class="post-metadata">

### Author: ![KaBergmanis](https://avatars.discourse-cdn.com/v4/letter/k/43a26b/32.png) [@KaBergmanis](https://discuss.elastic.co/u/KaBergmanis)
#### Post date: [January 11, 2024, 7:32am UTC](https://discuss.elastic.co/t/group-results-in-visualization/350735/3 "2024-01-11T07:32:15Z")

</div>

Hello,  
thanks for feedback, though I'm at loss a bit - I just don't see anything looking like your fields in my page. Am I looking at right place?

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/0/d070cf8720653a44b0848c2e6cd0025be53d79e3.png)

---

<div class="post-metadata">

### Author: ![Priscilla\_Parodi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/priscilla_parodi/32/43047_2.png) [@Priscilla\_Parodi](https://discuss.elastic.co/u/Priscilla_Parodi)
#### Post date: [January 11, 2024, 6:45pm UTC](https://discuss.elastic.co/t/group-results-in-visualization/350735/4 "2024-01-11T18:45:39Z")

</div>

Buckets -\> Split slices -\> select the `filters` aggregation. Then add your filters.

 ![Screen Shot 2024-01-11 at 1.43.37 PM](https://us1.discourse-cdn.com/elastic/original/3X/b/c/bcd4fc5536abed23e59f7be79a26c556cf273e05.jpeg)

---

<div class="post-metadata">

### Author: ![KaBergmanis](https://avatars.discourse-cdn.com/v4/letter/k/43a26b/32.png) [@KaBergmanis](https://discuss.elastic.co/u/KaBergmanis)
#### Post date: [January 12, 2024, 6:16am UTC](https://discuss.elastic.co/t/group-results-in-visualization/350735/5 "2024-01-12T06:16:45Z")

</div>

Great, thank you, that got me my results!  
Mistake was that I had grouped them on significant term, so filters option wasn't available - when that was removed and filtered by os\_ver.keyword, it worked like a charm.

---

<div class="post-metadata">

### Author: ![Priscilla\_Parodi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/priscilla_parodi/32/43047_2.png) [@Priscilla\_Parodi](https://discuss.elastic.co/u/Priscilla_Parodi)
#### Post date: [January 12, 2024, 5:31pm UTC](https://discuss.elastic.co/t/group-results-in-visualization/350735/6 "2024-01-12T17:31:05Z")

</div>

You're welcome. Glad it worked!

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 9, 2024, 5:31pm UTC](https://discuss.elastic.co/t/group-results-in-visualization/350735/7 "2024-02-09T17:31:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
