# Newbie question: Visualize number of log entries per device

**URL:** <https://discuss.elastic.co/t/newbie-question-visualize-number-of-log-entries-per-device/79771>\
**Category:** Kibana\
**Created:** [March 23, 2017, 4:04pm UTC](https://discuss.elastic.co/t/newbie-question-visualize-number-of-log-entries-per-device/79771 "2017-03-23T16:04:10Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![jmbrown](https://avatars.discourse-cdn.com/v4/letter/j/898d66/32.png) [@jmbrown](https://discuss.elastic.co/u/jmbrown)\
**Post date:** [March 23, 2017, 4:04pm UTC](https://discuss.elastic.co/t/newbie-question-visualize-number-of-log-entries-per-device/79771/1 "2017-03-23T16:04:11Z")

</div>

HI, I just setup a ELK stack and I'm using Logstash to ingest syslog entries from our routers.  
What I would like to do is create a visualization that shows a pie chart:  
The data would be

Number of log entries per device (host) over some period of time (customizable).

Pointers, solutions, etc would be great. Hopefully I can use that as an example to learn from and create other viz's.

Thank you in advance

---

<div class="post-metadata">

**Author:** ![cjcenizal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cjcenizal/32/11216_2.png) [@cjcenizal](https://discuss.elastic.co/u/cjcenizal)\
**Post date:** [March 23, 2017, 7:28pm UTC](https://discuss.elastic.co/t/newbie-question-visualize-number-of-log-entries-per-device/79771/2 "2017-03-23T19:28:16Z")

</div>

Hi John,

I think you'll be able to create this kind of pie chart in Kibana by clicking the "Visualize" app in the side bar, and then clicking the "+" icon on the table to create a new visualization. This will enter you into the wizard. At this point, you should see a list of different types of visualizations. Click "Pie chart". Then you should be able to create a Terms aggregation over the field you want (in this case I think this is "host") and select a time range with the date picker in the top right corner. Your screen will look something like this:

 ![](https://us1.discourse-cdn.com/elastic/original/3X/a/6/a6c7fd99223be8a00af5bba3dbe01cbe67d3305d.png)

Does this help?

Thanks,  
CJ

---

<div class="post-metadata">

**Author:** ![jmbrown](https://avatars.discourse-cdn.com/v4/letter/j/898d66/32.png) [@jmbrown](https://discuss.elastic.co/u/jmbrown)\
**Post date:** [March 23, 2017, 9:21pm UTC](https://discuss.elastic.co/t/newbie-question-visualize-number-of-log-entries-per-device/79771/3 "2017-03-23T21:21:10Z")

</div>

CJ, Totally awesome. Thank you so very much for this on-point response.  
So many times people reply with less than helpful answers.  
This helped a bunch.

AGAIN THANK YOU YES THIS HELPED

---

<div class="post-metadata">

**Author:** ![cjcenizal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cjcenizal/32/11216_2.png) [@cjcenizal](https://discuss.elastic.co/u/cjcenizal)\
**Post date:** [March 23, 2017, 9:35pm UTC](https://discuss.elastic.co/t/newbie-question-visualize-number-of-log-entries-per-device/79771/4 "2017-03-23T21:35:57Z")

</div>

Great! Thanks for the encouragement. 😃

CJ

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 20, 2017, 9:36pm UTC](https://discuss.elastic.co/t/newbie-question-visualize-number-of-log-entries-per-device/79771/5 "2017-04-20T21:36:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
