# Input from 3 log files on 1 visualization on kibana

**URL:** <https://discuss.elastic.co/t/input-from-3-log-files-on-1-visualization-on-kibana/238941>\
**Category:** Kibana\
**Created:** [June 27, 2020, 10:33am UTC](https://discuss.elastic.co/t/input-from-3-log-files-on-1-visualization-on-kibana/238941 "2020-06-27T10:33:12Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![falconpurple](https://avatars.discourse-cdn.com/v4/letter/f/aeb1de/32.png) [@falconpurple](https://discuss.elastic.co/u/falconpurple)\
**Post date:** [June 27, 2020, 10:33am UTC](https://discuss.elastic.co/t/input-from-3-log-files-on-1-visualization-on-kibana/238941/1 "2020-06-27T10:33:12Z")

</div>

Hi,

I have to connect 3 log files.  
The Logfile 1 contains fields:  
Logdate,request\_type,responsetime  
The Logfile 2 contains fields:  
Logdate,request\_type,responsetime  
The Logfile 3 contains fields:  
Logdate,request\_type,responsetime

I have to create a line chart on kibana which shows response time from all the log files.

Can you please suggest me how to do it?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [June 27, 2020, 12:21pm UTC](https://discuss.elastic.co/t/input-from-3-log-files-on-1-visualization-on-kibana/238941/2 "2020-06-27T12:21:04Z")

</div>

You can use filebeat to read all the files and index the content in elasticsearch. Depending on the content, you might have to parse the logs using a dissect processor in an ingest pipeline to create a structured document.

Then you will be able to show all that in Kibana.

---

<div class="post-metadata">

**Author:** ![falconpurple](https://avatars.discourse-cdn.com/v4/letter/f/aeb1de/32.png) [@falconpurple](https://discuss.elastic.co/u/falconpurple)\
**Post date:** [June 27, 2020, 1:25pm UTC](https://discuss.elastic.co/t/input-from-3-log-files-on-1-visualization-on-kibana/238941/3 "2020-06-27T13:25:59Z")

</div>

> [@dadoonet](#):
>
> ng a dissect processor in an ingest pipeline to create a structured document.
> 
> Then you will be able to show all that in Kibana.

Hi,  
Thank you for the suggestion.

I have written the logstash conf file .  
The data is coming only from the third logfile on kibana.

```auto
input{
		file{
				path => "C:/Users/Downloads/ingest.log"
				
				
				start_position => "beginning"
				sincedb_path => "NUL"					
				
			}
		file{
				path => "C:/Users/Downloads/ingest2.log"
				
				
				start_position => "beginning"
				sincedb_path => "NUL"					
				
			}
			file{
				path => "C:/Users/mohnadik/Downloads/ingest3.log"
				
				
				start_position => "beginning"
				sincedb_path => "NUL"					
				
			}
				
		
	}
filter {
    if [path] == "C:/Users/Downloads/ingest.log"
	{
	grok {
        match => {
		"message" => "%{TIMESTAMP_ISO8601:logdates}%{WORD:request_type}%{WORD:Time1}"
					}
			}
			date {
				match => ["logdates", "YYYY-MM-dd HH:mm:ss.SSS"]
				target => "logdates"
				timezone => "CET"
		}
	}
	if [path] == "C:/Users/Downloads/ingest2.log"
	{
	grok {
        match => {
		"message" => "%{TIMESTAMP_ISO8601:logdates}%{WORD:request_type}%{WORD:Time2}"
					}
			}
			date {
				match => ["logdates", "YYYY-MM-dd HH:mm:ss.SSS"]
				target => "logdates"
				timezone => "CET"
		}
	}
	if [path] == "C:/Users/Downloads/ingest3.log"
	{
	grok {
        match => {
		"message" => "%{TIMESTAMP_ISO8601:logdates}%{WORD:request_type}%{WORD:Time1}"
					}
			}
			date {
				match => ["logdates","yyyy-MM-dd HH:mm:ss.SSS"]
				target => "logdates"
				timezone => "CET"
		}
	}
			
	
	
	}
	

output{

    
		elasticsearch {
                        hosts => ["localhost:9200"]
						index => "demo"
                       
                    }
		
		
		
		stdout{}
	
	
		
	}
	
	

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 25, 2020, 1:26pm UTC](https://discuss.elastic.co/t/input-from-3-log-files-on-1-visualization-on-kibana/238941/4 "2020-07-25T13:26:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.