# Kibana timeseries with stacked bar graph

**URL:** <https://discuss.elastic.co/t/kibana-timeseries-with-stacked-bar-graph/275464>\
**Category:** Kibana\
**Created:** [June 9, 2021, 3:30pm UTC](https://discuss.elastic.co/t/kibana-timeseries-with-stacked-bar-graph/275464 "2021-06-09T15:30:15Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![rmartinez.rv](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rmartinez.rv/32/86414_2.png) [@rmartinez.rv](https://discuss.elastic.co/u/rmartinez.rv)\
**Post date:** [June 9, 2021, 3:30pm UTC](https://discuss.elastic.co/t/kibana-timeseries-with-stacked-bar-graph/275464/1 "2021-06-09T15:30:15Z")

</div>

Hi.  
I'm looking for help with getting a "particular" graph from kibana.  
I have an index in my elastic server filling with this kind of information:

```auto
{
  "_index": "register",
  "_type": "_doc",
  "_id": "6kRQ8XkBeDPVH1c7C_I2",
  "_version": 1,
  "_score": null,
  "_source": {
    "dominio": "my.domain.net",
    "User-Agent": "Release 6.2.2.0 stamp 104875",
    "type": "register",
    "AOR": "d2.527@my.domain.net",
    "@timestamp": "2021-06-09T15:06:55.400Z",
    "Expires": "265",
    "command": "/tmp/dump_users",
    "host": "myhost1",
    "@version": "1",
    "dispositivo": "d2",
    "anexo": "527",
    "State": "CS_SYNC"
  },
  "fields": {
    "@timestamp": [
      "2021-06-09T15:06:55.400Z"
    ]
  },
  "sort": [
    1623251215400
  ]
}

```

I receive one of this event per "anexo" registered in a SIP server. I made a call every 5 minutes to a custom shell program in the server to get the REGISTERED phones in a PBX. Every registered phone gets a event like above. One "phone" can have two or more registers/events within a shell call.  
So for example.. i can have for phone (annex) 527.. two registered events:

```auto
{
  "_index": "register",
  "_type": "_doc",
  "_id": "6kRQ8XkBeDPVH1c7C_I2",
  "_version": 1,
  "_score": null,
  "_source": {
    "dominio": "my.domain.net",
    "User-Agent": "Release 6.2.2.0 stamp 104875",
    "type": "register",
    "AOR": "d2.527@my.domain.net",
    "@timestamp": "2021-06-09T15:06:55.400Z",
    "Expires": "129",
    "command": "/tmp/dump_users",
    "host": "myhost1",
    "@version": "1",
    "dispositivo": "d2",
    "anexo": "527",
    "State": "CS_SYNC"
  },
  "fields": {
    "@timestamp": [
      "2021-06-09T15:06:55.400Z"
    ]
  },
  "sort": [
    1623251215400
  ]
}

{
  "_index": "register",
  "_type": "_doc",
  "_id": "6kRQ8XkBeDPVH1c7C_I2",
  "_version": 1,
  "_score": null,
  "_source": {
    "dominio": "my.domain.net",
    "User-Agent": "Release 6.2.2.0 stamp 104875",
    "type": "register",
    "AOR": "d1.527@my.domain.net",
    "@timestamp": "2021-06-09T15:06:55.400Z",
    "Expires": "265",
    "command": "/tmp/dump_users",
    "host": "myhost1",
    "@version": "1",
    "dispositivo": "d1",
    "anexo": "527",
    "State": "CS_SYNC"
  },
  "fields": {
    "@timestamp": [
      "2021-06-09T15:06:55.400Z"
    ]
  },
  "sort": [
    1623251215400
  ]
}

```

I need to show in a Timeseries visualization how many "phones" (anexo) have two registers... and how many phones has one register....maybe in a stack bar timeseries...  
So far I wasn't able to create a graph with this kind of aggregattion... i only was able to show how many registered phones i have in total...  
Is there a way to achive this?

Thanks!

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [June 15, 2021, 11:27am UTC](https://discuss.elastic.co/t/kibana-timeseries-with-stacked-bar-graph/275464/2 "2021-06-15T11:27:08Z")

</div>

I don't see this doable anywhere else than in Canvas with ESSQL. [Canvas | Kibana Guide [master] | Elastic](https://www.elastic.co/guide/en/kibana/master/canvas.html)

---

<div class="post-metadata">

**Author:** ![rmartinez.rv](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rmartinez.rv/32/86414_2.png) [@rmartinez.rv](https://discuss.elastic.co/u/rmartinez.rv)\
**Post date:** [June 15, 2021, 9:42pm UTC](https://discuss.elastic.co/t/kibana-timeseries-with-stacked-bar-graph/275464/3 "2021-06-15T21:42:30Z")

</div>

Could this be possible with VEGA maybe?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 13, 2021, 9:42pm UTC](https://discuss.elastic.co/t/kibana-timeseries-with-stacked-bar-graph/275464/4 "2021-07-13T21:42:50Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.