# Kibana data table for user sessions on win10

**URL:** <https://discuss.elastic.co/t/kibana-data-table-for-user-sessions-on-win10/359921>\
**Category:** Kibana\
**Tags:** visualisation\
**Created:** [May 21, 2024, 12:52pm UTC](https://discuss.elastic.co/t/kibana-data-table-for-user-sessions-on-win10/359921 "2024-05-21T12:52:13Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Louis\_Lelievre](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/louis_lelievre/32/134674_2.png) [@Louis\_Lelievre](https://discuss.elastic.co/u/Louis_Lelievre)\
**Post date:** [May 21, 2024, 12:52pm UTC](https://discuss.elastic.co/t/kibana-data-table-for-user-sessions-on-win10/359921/1 "2024-05-21T12:52:13Z")

</div>

Hi,

I'm new to the elastic stack, and I'm trying to create a data table with the following information in a single line :

- date/hour/second of the started win10 session
- date/hour/second of the ended win10 session
- session duration (hour/second)
- hostname of the machine been used for the session
- ip of the machine
- Os the machine

I'm using winlogbeat for this.

I tried to use bucket aggregation, transforms ... But it's hard for me to understand everything, and the task look a little hard for a beginner.

I successfully created this data table, but there are 2 problems :

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/7/9730cfa4c7a5fcbeb11b15ffd563aa751dfd1b93.png)

Lines are separated from the event.action type "logged-in" and "logged-out" and I would like these informations to be in the same line (with 2 rows). + i would like to have the session duration (calculated from end\_session - start\_session).

Does anyone have already faced this problem ? Does anyone know how to create this kind of data visualization ?

Thanks for your answers,

Louis lelievre