# Multiple VMs Data in single visualization

**URL:** <https://discuss.elastic.co/t/multiple-vms-data-in-single-visualization/165365>\
**Category:** Kibana\
**Created:** [January 23, 2019, 9:23am UTC](https://discuss.elastic.co/t/multiple-vms-data-in-single-visualization/165365 "2019-01-23T09:23:57Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rizul\_khanna](https://avatars.discourse-cdn.com/v4/letter/r/a3d4f5/32.png) [@Rizul\_khanna](https://discuss.elastic.co/u/Rizul_khanna)\
**Post date:** [January 23, 2019, 9:23am UTC](https://discuss.elastic.co/t/multiple-vms-data-in-single-visualization/165365/1 "2019-01-23T09:23:58Z")

</div>

I've multiple VMs sending metricbeat data to multiple indices in ES. I want to make a graph which shows top 3 VMs with Highest RAM/CPU consumption and there should be thresholds and it should turn Red when it it let's say going beyond 75% and Green at all times otherwise

Any thoughts on how to achieve this?

---

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [January 24, 2019, 10:10pm UTC](https://discuss.elastic.co/t/multiple-vms-data-in-single-visualization/165365/2 "2019-01-24T22:10:58Z")

</div>

> [@Rizul\_khanna](#):
>
> make a graph which shows top 3 VMs

When you say graph, what kind of visualization do you mean? Date histogram? Data table? Guage? Pie?

Most visualizations can have split series, so you'll want to do something like split the visualization by terms, use hostname as the term, and have it ordered by max of RAM. Some of the visualization types can have conditional formatting to illustrate their thresholds with colors.

It sounds like the guage visualization would be a good one for you.

Have you looked at the built-in metricbeat dashboards? Out of the box, you'd get a Data Table visualization that can show you at least the first part of what you're asking:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/a/6ab98a667dfcc32032b05b09d3de7d201518123b.png)

Go ahead and edit that visualization and you can see how it does its aggregation:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/d/ed9cd0591f2d1d8cc2ce552f1a0787305a2b7bc8.png)

^ Kibana 6.5.4

Docs on Loading the Kibana Dashboards [Load Kibana dashboards | Metricbeat Reference [8.11] | Elastic](https://www.elastic.co/guide/en/beats/metricbeat/current/load-kibana-dashboards.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 21, 2019, 10:11pm UTC](https://discuss.elastic.co/t/multiple-vms-data-in-single-visualization/165365/3 "2019-02-21T22:11:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.