# Migration of Dashboards to Kibana 4: TopN Queries and Visualization

**URL:** <https://discuss.elastic.co/t/migration-of-dashboards-to-kibana-4-topn-queries-and-visualization/111075>\
**Category:** Kibana\
**Created:** [December 11, 2017, 11:16am UTC](https://discuss.elastic.co/t/migration-of-dashboards-to-kibana-4-topn-queries-and-visualization/111075 "2017-12-11T11:16:11Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Christoph\_Kiefer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christoph_kiefer/32/25287_2.png) [@Christoph\_Kiefer](https://discuss.elastic.co/u/Christoph_Kiefer)\
**Post date:** [December 11, 2017, 11:16am UTC](https://discuss.elastic.co/t/migration-of-dashboards-to-kibana-4-topn-queries-and-visualization/111075/1 "2017-12-11T11:16:11Z")

</div>

Dear All

I'm quite knew to the ELK stack and Kibana in particular. My task is to migrate a bunch of antique Kibana 3 dashboards to Kibana 4.5.4 (Build 10000).

The dashboard looks like this:

 ![Dashboard](https://us1.discourse-cdn.com/elastic/original/3X/a/c/ac4a8e99b2e22e3b20b16edca191af0d160cef9a.jpg)

As you can see, multiple queries are defined at the top. The first two queries from top left are defined as follows:  
 ![First_topN_Query](https://us1.discourse-cdn.com/elastic/original/3X/6/3/634d6ff4ea70ae575caaade9977ad53440572e83.jpg) ![Second_topN_Query](https://us1.discourse-cdn.com/elastic/original/3X/a/4/a45f1e961490de0793146d12ee2a1f49d3b5acb6.jpg)

The table-like "ALERT" visualization is configured as follows, i.e., it references the first two queries shown above:

 ![Visualization_Configuration_Queries](https://us1.discourse-cdn.com/elastic/original/3X/d/7/d7c9700d9678601492bc275008448dacc068e5a9.jpg)

Inspecting the ALERT visualization shows this JSON code:

```
curl -XGET 'http://localhost/elasticsearch-admindev/logstash-2017.12.11/_search?pretty' -d '{
  "size": 0,
  "query": {
    "bool": {
      "should": [
        {
          "query_string": {
            "query": "*"
          }
        }
      ]
    }
  },
  "aggs": {
    "filters": {
      "filter": {
        "bool": {
          "must": [
            {
              "range": {
                "@timestamp": {
                  "from": 1510395149979,
                  "to": 1512987149979
                }
              }
            }
          ]
        }
      },
      "aggs": {
        "field": {
          "terms": {
            "field": "vmw_alert.raw",
            "exclude": {
              "pattern": []
            },
            "size": 20,
            "order": {
              "_count": "desc"
            }
          }
        }
      }
    }
  }
}'

```

Field "vmw\_alert.raw" is used to display the most frequent alert values.

I have difficulties to model this dashboard in Kibana 4.5.4. In particular, I cannot find a solution to migrate the two topN queries shown above and, in a second step, to build the ALERT visualization that utilizes these queries.

Any help is highly appreciated.

Kind regards  
Christoph

---

<div class="post-metadata">

**Author:** ![Stacey\_Gammon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stacey_gammon/32/14025_2.png) [@Stacey\_Gammon](https://discuss.elastic.co/u/Stacey_Gammon)\
**Post date:** [December 11, 2017, 6:32pm UTC](https://discuss.elastic.co/t/migration-of-dashboards-to-kibana-4-topn-queries-and-visualization/111075/2 "2017-12-11T18:32:23Z")

</div>

Unfortunately Kibana 4 is no longer officially supported due to the recent release of Kibana 6. How many dashboards do you have? Is manually re-creating them in Kibana 5 or 6 an option?

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [December 11, 2017, 6:35pm UTC](https://discuss.elastic.co/t/migration-of-dashboards-to-kibana-4-topn-queries-and-visualization/111075/3 "2017-12-11T18:35:18Z")

</div>

If you can migrate to a more recent version of Elasticsearch and Kibana, you may have an easier time as there is a lot more flexibility compared to Kibana 4, e.g. the new time-series visual builder and a lot of new visualisations.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 8, 2018, 6:35pm UTC](https://discuss.elastic.co/t/migration-of-dashboards-to-kibana-4-topn-queries-and-visualization/111075/4 "2018-01-08T18:35:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.