# Kibana visualize problem2

**URL:** <https://discuss.elastic.co/t/kibana-visualize-problem2/115686>\
**Category:** Kibana\
**Created:** [January 16, 2018, 10:39am UTC](https://discuss.elastic.co/t/kibana-visualize-problem2/115686 "2018-01-16T10:39:22Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![abu.sayeed](https://avatars.discourse-cdn.com/v4/letter/a/dec6dc/32.png) [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\
**Post date:** [January 16, 2018, 10:39am UTC](https://discuss.elastic.co/t/kibana-visualize-problem2/115686/1 "2018-01-16T10:39:23Z")

</div>

my visualize data table:  
 ![Capturerytyr](https://us1.discourse-cdn.com/elastic/original/3X/9/6/96e918d6d3d2931c4b9957746c97a9c99dc272dd.PNG)

My\_log\_type:

system.auth.hostname = pc1  
system.auth.ssh.event=Accepted  
system.auth.ssh.ip= 192.168.100.5  
system.auth.user=root

system.auth.hostname = pc3  
system.auth.ssh.event=Accepted  
system.auth.ssh.ip= 192.168.100.5  
system.auth.user=kalam

How can I create a visualize bar which will show all that information?

Thanks

---

<div class="post-metadata">

**Author:** ![spalger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spalger/32/14092_2.png) [@spalger](https://discuss.elastic.co/u/spalger)\
**Post date:** [January 16, 2018, 7:37pm UTC](https://discuss.elastic.co/t/kibana-visualize-problem2/115686/2 "2018-01-16T19:37:55Z")

</div>

In the standard "Vertical/Horizontal Bar Chart" visualization, the bars can only be split up twice (have two dimensions): once on the x-axis and once within the bars themselves (called "Split series" in the visualize UI).

The table you are showing has three dimensions: ip, username, and remote host.

If you want to render a bar chart that is split by three dimensions you can, but you can't do it all within the bars, you'll have to split the chart by one dimension.

This is an example that first splits the charts by `username` so that each username has its own chart. It then splits the bars on the x-axis by `remote_host`, and splits the bars within each `remote_host` by the `ip`. You can see that hovering over a part of one bar shows how that part of the visualization is defined by three dimensions:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/6/f647655699c3553a33b4e2e11cfb3d7369befa19.png)

---

<div class="post-metadata">

**Author:** ![abu.sayeed](https://avatars.discourse-cdn.com/v4/letter/a/dec6dc/32.png) [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\
**Post date:** [January 17, 2018, 4:15am UTC](https://discuss.elastic.co/t/kibana-visualize-problem2/115686/3 "2018-01-17T04:15:36Z")

</div>

Thanks. It work for me.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 14, 2018, 4:16am UTC](https://discuss.elastic.co/t/kibana-visualize-problem2/115686/4 "2018-02-14T04:16:09Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.