# Make virtualization file beat aggregation

**URL:** https://discuss.elastic.co/t/make-virtualization-file-beat-aggregation/323907
**Category:** Elasticsearch
**Created:** [January 25, 2023, 10:26am UTC](https://discuss.elastic.co/t/make-virtualization-file-beat-aggregation/323907 "2023-01-25T10:26:00Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![devdev7711](https://avatars.discourse-cdn.com/v4/letter/d/3be4f8/32.png) [@devdev7711](https://discuss.elastic.co/u/devdev7711)
#### Post date: [January 25, 2023, 10:26am UTC](https://discuss.elastic.co/t/make-virtualization-file-beat-aggregation/323907/1 "2023-01-25T10:26:00Z")

</div>

"log.file.path": [  
"C:\ProgramData\UNO\SES\Logs\user1\101.log" 10 count  
"log.file.path": [  
"C:\ProgramData\UNO\SES\Logs\user1\102.log" 20 count  
"log.file.path": [  
"C:\ProgramData\UNO\SES\Logs\user2\101.log" 10 count  
"log.file.path": [  
"C:\ProgramData\UNO\SES\Logs\user1\102.log" 50 count

```
I am getting the log file path data like above i have log file as per user folder if you see above I have 2 file for user1 which have 30 logs.
and 2 files for user2 which have 60 logs.

i want to aggregate and show as per user wise in pie graph like user1 count 30 and user2 count 60 
how can we make aggregate like C:\\ProgramData\\UNO\\SES\\Logs\\user1\\ this only so it may count

```

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 22, 2023, 10:26am UTC](https://discuss.elastic.co/t/make-virtualization-file-beat-aggregation/323907/2 "2023-02-22T10:26:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.