# Multiple Dashboards for real time data

**URL:** <https://discuss.elastic.co/t/multiple-dashboards-for-real-time-data/303372>\
**Category:** Kibana\
**Created:** [April 27, 2022, 9:19am UTC](https://discuss.elastic.co/t/multiple-dashboards-for-real-time-data/303372 "2022-04-27T09:19:43Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![anushka1203](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anushka1203/32/98018_2.png) [@anushka1203](https://discuss.elastic.co/u/anushka1203)\
**Post date:** [April 27, 2022, 9:19am UTC](https://discuss.elastic.co/t/multiple-dashboards-for-real-time-data/303372/1 "2022-04-27T09:19:43Z")

</div>

I have a multiple units numbered (1,2,3...) each unit has multiple type of log files(such as opereational, selinux audit, access & error)  
is it possible to create a UI on kibana that has a dashboard displaying all these unit numbers, further upon clicking on the number another dashboard should open displaying all the different type of log files which have their own dashboards.  
example:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/2/125fca7199f1a8756b4e0d8e1f4e6e08c1d71561.png)  
The data is continuously being fed in real time based on the unit number

I want to know if this can be done using ELK and filebeat  
Help will be appreciated

Thanks in advance

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [April 29, 2022, 1:10am UTC](https://discuss.elastic.co/t/multiple-dashboards-for-real-time-data/303372/2 "2022-04-29T01:10:06Z")

</div>

You can use something like [Make dashboards interactive | Kibana Guide [8.1] | Elastic](https://www.elastic.co/guide/en/kibana/current/drilldowns.html) to do that.

---

<div class="post-metadata">

**Author:** ![anushka1203](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anushka1203/32/98018_2.png) [@anushka1203](https://discuss.elastic.co/u/anushka1203)\
**Post date:** [May 3, 2022, 2:54am UTC](https://discuss.elastic.co/t/multiple-dashboards-for-real-time-data/303372/3 "2022-05-03T02:54:17Z")

</div>

Will check it out. Thank you so much!

---

<div class="post-metadata">

**Author:** ![anushka1203](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anushka1203/32/98018_2.png) [@anushka1203](https://discuss.elastic.co/u/anushka1203)\
**Post date:** [May 11, 2022, 6:28am UTC](https://discuss.elastic.co/t/multiple-dashboards-for-real-time-data/303372/4 "2022-05-11T06:28:18Z")

</div>

Sorry i am new to elk stack. would appreciate it if you could help me with another query. I have different type of log files such as audit, access, syslog, csv files belonging to each unit number. Do you recommend create different indices for each type or do i send all the data to one single index? will i be able to corelate the common field of "unit number" present in all the indices if i create multiple of them?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 11, 2022, 7:39am UTC](https://discuss.elastic.co/t/multiple-dashboards-for-real-time-data/303372/5 "2022-05-11T07:39:35Z")

</div>

Please create a new topic for a different question 🙂

---

<div class="post-metadata">

**Author:** ![anushka1203](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anushka1203/32/98018_2.png) [@anushka1203](https://discuss.elastic.co/u/anushka1203)\
**Post date:** [May 11, 2022, 8:42am UTC](https://discuss.elastic.co/t/multiple-dashboards-for-real-time-data/303372/6 "2022-05-11T08:42:36Z")

</div>

> [@Organize Filebeat inputs and Directory Hierarchy](https://discuss.elastic.co/t/organize-filebeat-inputs-and-directory-hierarchy/303989):
>
> The log files on my system are stored in the following manner. [image] [image] and these folders finally contain the log files (access, error, audit and csv files) that need to be parsed example: since it is realtime data, new units and new folders in the units folder keep on getting added. I need help in understanding how to organize the filebeat inputs for parsing of all of this data to logstash and also extract the unit number as a field. Should I create a single inde…

this one contains the above question too.  
Thank you for your time

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 8, 2022, 8:43am UTC](https://discuss.elastic.co/t/multiple-dashboards-for-real-time-data/303372/7 "2022-06-08T08:43:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
