# Legacy metric to display unique count of a combination of 3 fields **URL:** \ **Category:** Kibana\ **Created:** [June 27, 2023, 12:15pm UTC](https://discuss.elastic.co/t/legacy-metric-to-display-unique-count-of-a-combination-of-3-fields/336985 "2023-06-27T12:15:50Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Neelam\_Zanvar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/neelam_zanvar/32/103116_2.png) [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Post date:** [June 27, 2023, 12:15pm UTC](https://discuss.elastic.co/t/legacy-metric-to-display-unique-count-of-a-combination-of-3-fields/336985/1 "2023-06-27T12:15:51Z")
Hi, I am working on a kibana dashboard and using a legacy metric visualization. How can i display a unique count of a combination of three fields in the data view? there is an option of selecting only one field. ```auto { "mappings": { "properties": { "3dxp_tag": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "@timestamp": { "type": "date" }, "@version": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "agent": { "properties": { "ephemeral_id": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "id": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "name": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "type": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "version": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } }, "bytes": { "type": "long" }, "clientip": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "cloud": { "properties": { "account": { "properties": { "id": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } }, "availability_zone": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "image": { "properties": { "id": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } }, "instance": { "properties": { "id": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } }, "machine": { "properties": { "type": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } }, "provider": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "region": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "service": { "properties": { "name": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } } } }, "date": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "duration": { "type": "float" }, "ecs": { "properties": { "version": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } }, "email": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "event": { "properties": { "original": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } }, "host": { "properties": { "architecture": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "hostname": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "id": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "ip": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "mac": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "name": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "os": { "properties": { "build": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "family": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "kernel": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "name": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "platform": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "type": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "version": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } } } }, "http_version": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "input": { "properties": { "type": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } }, "log": { "properties": { "file": { "properties": { "path": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } }, "offset": { "type": "long" } } }, "message": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "method": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "remoteip": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "response": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "tag1": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "tags": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "token": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "type": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "url": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } } } ``` Here is my index. I want unique count of email, token and remote ip? how is it possible? ---
**Author:** ![Marco\_Liberati](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marco_liberati/32/82953_2.png) [@Marco\_Liberati](https://discuss.elastic.co/u/Marco_Liberati)\ **Post date:** [June 30, 2023, 9:38am UTC](https://discuss.elastic.co/t/legacy-metric-to-display-unique-count-of-a-combination-of-3-fields/336985/2 "2023-06-30T09:38:54Z")
Hi @Neelam_Zanvar you mean display 3 unique counts, one of each, or perform any math operation between the 3 distinct count? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 28, 2023, 9:39am UTC](https://discuss.elastic.co/t/legacy-metric-to-display-unique-count-of-a-combination-of-3-fields/336985/3 "2023-07-28T09:39:10Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.