# Kibana Visualization - combine filters

**URL:** https://discuss.elastic.co/t/kibana-visualization-combine-filters/218862
**Category:** Kibana
**Created:** [February 11, 2020, 8:45pm UTC](https://discuss.elastic.co/t/kibana-visualization-combine-filters/218862 "2020-02-11T20:45:53Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![rmoat](https://avatars.discourse-cdn.com/v4/letter/r/8797f3/32.png) [@rmoat](https://discuss.elastic.co/u/rmoat)
#### Post date: [February 11, 2020, 8:45pm UTC](https://discuss.elastic.co/t/kibana-visualization-combine-filters/218862/1 "2020-02-11T20:45:54Z")

</div>

Hello,

I'm trying to combine two filters together for a visualization, but it is not functioning correctly at all.  
I wanted to combine: winlog.event\_id:4723 **and** winlog.keywords:"Audit Success". When I do that, I'm getting a count of **53 events**.

So I created a column for winlog.event\_id:4723 which has a count of **1**.  
And one more column for winlog.keywords:"Audit Success" which has a count of **6**.

So, if it were working correctly, that first filter should show a count of **7**.

I haven't really found any recent posts about this, and perhaps I'm searching for the wrong thing. Is there any way I can solve this issue?

See screenshot for what the visualization looks like:

 ![Issues](https://us1.discourse-cdn.com/elastic/original/3X/b/a/baa5e680267d4fc1959c58469c9ebc07e3c6042f.png)

---

<div class="post-metadata">

### Author: ![vinu89](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vinu89/32/45939_2.png) [@vinu89](https://discuss.elastic.co/u/vinu89)
#### Post date: [February 12, 2020, 6:51am UTC](https://discuss.elastic.co/t/kibana-visualization-combine-filters/218862/2 "2020-02-12T06:51:05Z")

</div>

> [@rmoat](#):
>
> Audit Success

As per my understanding you have to get a result with winlog event id:4728 and whose keywords are success.Remove whatever you have given in aggregation just set the Y axis to count and .Select Add filter which is on the top and put your first condition there

![image](https://us1.discourse-cdn.com/elastic/original/3X/5/5/55161a81d4248aeb4fac396fd62765f6e415139d.png)

Then after this click on add filter and do the same with winlog.keywords:"Audit Success"

![image](https://us1.discourse-cdn.com/elastic/original/3X/7/3/733c09cf336ba0565de2034613dbc05083f73bd5.png)

---

<div class="post-metadata">

### Author: ![rmoat](https://avatars.discourse-cdn.com/v4/letter/r/8797f3/32.png) [@rmoat](https://discuss.elastic.co/u/rmoat)
#### Post date: [February 12, 2020, 2:28pm UTC](https://discuss.elastic.co/t/kibana-visualization-combine-filters/218862/3 "2020-02-12T14:28:34Z")

</div>

That's great, and that really was a very simple solution. Thank you for your help!

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 11, 2020, 2:28pm UTC](https://discuss.elastic.co/t/kibana-visualization-combine-filters/218862/4 "2020-03-11T14:28:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.