# Multiple visualizations on a single graph **URL:** \ **Category:** Kibana\ **Created:** [December 21, 2015, 8:54pm UTC](https://discuss.elastic.co/t/multiple-visualizations-on-a-single-graph/37719 "2015-12-21T20:54:05Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![DigiAngel](https://avatars.discourse-cdn.com/v4/letter/d/977dab/32.png) [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Post date:** [December 21, 2015, 8:54pm UTC](https://discuss.elastic.co/t/multiple-visualizations-on-a-single-graph/37719/1 "2015-12-21T20:54:05Z")
With Kibana 3 I could create a graph and have multiple, unrelated queries as shown below: ![](https://us1.discourse-cdn.com/elastic/original/2X/e/e7c79c7a3396841513e3f0219b2c8f504d8eb0c8.jpg) Is there a way to achieve this with Kibana 4? Thank you. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [December 21, 2015, 9:25pm UTC](https://discuss.elastic.co/t/multiple-visualizations-on-a-single-graph/37719/2 "2015-12-21T21:25:02Z")
We'll they are related 😛 You can do this a few ways, you can split the y-axis if you want to do it in KB, or you can also do it in TimeLion. ---
**Author:** ![DigiAngel](https://avatars.discourse-cdn.com/v4/letter/d/977dab/32.png) [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Post date:** [December 21, 2015, 9:33pm UTC](https://discuss.elastic.co/t/multiple-visualizations-on-a-single-graph/37719/3 "2015-12-21T21:33:07Z")
Ok fair 😛 In the screenshot I have two unique queries, one based on UDP, the other TCP. How do I have two separate searches or visualizations in one graph? ---
**Author:** ![DigiAngel](https://avatars.discourse-cdn.com/v4/letter/d/977dab/32.png) [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Post date:** [December 21, 2015, 10:41pm UTC](https://discuss.elastic.co/t/multiple-visualizations-on-a-single-graph/37719/4 "2015-12-21T22:41:50Z")
Looks like I had to go a layer up. So my search is just "conn" (connection log from bro-ids). Within that I then I choose split lines with filter 1 being udp, and filter 2 being tcp: ![](https://us1.discourse-cdn.com/elastic/original/2X/7/7f598bc8fcfa72b173b860c2bcaca0fca2132b81.jpg) So eh...it's ok. Thanks Mark. ---
**Author:** ![DigiAngel](https://avatars.discourse-cdn.com/v4/letter/d/977dab/32.png) [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Post date:** [December 23, 2015, 6:11pm UTC](https://discuss.elastic.co/t/multiple-visualizations-on-a-single-graph/37719/5 "2015-12-23T18:11:34Z")
Ok so here we go....I have two separate types from logstash: `type:snort type:conn` Both of these types have: `src_ip, dst_ip, src_port, dst_port` So. I create a new Search: `_exists_:src_ip` and I can see both conn and snort in the Search. So far so good. For the life of me I'm not able to get something like this: ![](https://us1.discourse-cdn.com/elastic/original/2X/2/26f3a30532ff6317cc1a91740455e5714a5d328c.jpg) This image contains the same two types, snort and conn. I've tried almost every combo of y-axis and x-axis, but no go. Is there a secret to getting something like the above? Sidenote, installed TimeLion...didn't understand it at all. ---
**Author:** ![lukas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lukas/32/6812_2.png) [@lukas](https://discuss.elastic.co/u/lukas)\ **Post date:** [December 23, 2015, 6:42pm UTC](https://discuss.elastic.co/t/multiple-visualizations-on-a-single-graph/37719/6 "2015-12-23T18:42:49Z")
I'm probably missing something, but can't you just create a vertical bar chart from your saved search, then split bars by filters (and create filters for each of the queries, i.e. large responses, large send, etc.)? ---
**Author:** ![DigiAngel](https://avatars.discourse-cdn.com/v4/letter/d/977dab/32.png) [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Post date:** [December 23, 2015, 7:35pm UTC](https://discuss.elastic.co/t/multiple-visualizations-on-a-single-graph/37719/7 "2015-12-23T19:35:32Z")
Thanks Lukas I will give that a try. Will that give me the Timeline I wonder? It'll have to wait until Monday 😄 ---
**Author:** ![DigiAngel](https://avatars.discourse-cdn.com/v4/letter/d/977dab/32.png) [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Post date:** [December 24, 2015, 4:04pm UTC](https://discuss.elastic.co/t/multiple-visualizations-on-a-single-graph/37719/8 "2015-12-24T16:04:35Z")
Ok I lied 😃 I did the upgrade at home and ya...you are right that did work. I had to change my thinking on how I filter: ![](https://us1.discourse-cdn.com/elastic/original/2X/2/2e2b7dc69c6a86277ba3985be0dc1213a58a11d0.png) Before this would be my query. Thanks again Lukas. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 2:06pm UTC](https://discuss.elastic.co/t/multiple-visualizations-on-a-single-graph/37719/9 "2017-07-06T14:06:04Z")