# Reporting difference logs with condition on visualize

**URL:** <https://discuss.elastic.co/t/reporting-difference-logs-with-condition-on-visualize/192355>\
**Category:** Kibana\
**Tags:** elastic-stack-graph\
**Created:** [July 26, 2019, 5:05am UTC](https://discuss.elastic.co/t/reporting-difference-logs-with-condition-on-visualize/192355 "2019-07-26T05:05:34Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![ntruonghau](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ntruonghau/32/50980_2.png) [@ntruonghau](https://discuss.elastic.co/u/ntruonghau)\
**Post date:** [July 26, 2019, 5:05am UTC](https://discuss.elastic.co/t/reporting-difference-logs-with-condition-on-visualize/192355/1 "2019-07-26T05:05:35Z")

</div>

I using nmap codec from logstash to send log daily for inventory checking. Suppose log of yesterday said that a host is up, but new log today display log is down. How can i create a visualize to display  
only hosts down today with condition it was up yesterday?

 ![Capture](https://us1.discourse-cdn.com/elastic/original/3X/e/6/e60c181336cb137f01dc00cca6830ae271324dc6.png)

---

<div class="post-metadata">

**Author:** ![nickpeihl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nickpeihl/32/112622_2.png) [@nickpeihl](https://discuss.elastic.co/u/nickpeihl)\
**Post date:** [July 30, 2019, 12:13am UTC](https://discuss.elastic.co/t/reporting-difference-logs-with-condition-on-visualize/192355/2 "2019-07-30T00:13:13Z")

</div>

Are you using our Uptime application for monitoring? [https://www.elastic.co/guide/en/kibana/current/uptime-overview.html](https://www.elastic.co/guide/en/kibana/current/uptime-overview.html). If so, maybe you can ask this question in the [Uptime forum](https://discuss.elastic.co/c/uptime).

If you are not using Uptime, please let me know and I can look into this further.

---

<div class="post-metadata">

**Author:** ![ntruonghau](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ntruonghau/32/50980_2.png) [@ntruonghau](https://discuss.elastic.co/u/ntruonghau)\
**Post date:** [July 30, 2019, 2:16am UTC](https://discuss.elastic.co/t/reporting-difference-logs-with-condition-on-visualize/192355/3 "2019-07-30T02:16:43Z")

</div>

Hi nickpeihl,  
I don't use Uptime rightnow  
Thanks for your request, I will take a look at Uptime overview and try this. If there are some problem , I will ask more question on Uptime forum.

---

<div class="post-metadata">

**Author:** ![ntruonghau](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ntruonghau/32/50980_2.png) [@ntruonghau](https://discuss.elastic.co/u/ntruonghau)\
**Post date:** [July 30, 2019, 9:08am UTC](https://discuss.elastic.co/t/reporting-difference-logs-with-condition-on-visualize/192355/4 "2019-07-30T09:08:15Z")

</div>

Hi again,  
We look like to use kibana, but don't want to affect to client by install heartbeat. We looking for a network scan for black-box solutions. So, do you have any solutions to help us?  
I want to get up/down status of 2 log with difference times stamp to compare and export the result that host was down or up between today and yesterday.  
Thanks

---

<div class="post-metadata">

**Author:** ![nickpeihl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nickpeihl/32/112622_2.png) [@nickpeihl](https://discuss.elastic.co/u/nickpeihl)\
**Post date:** [July 30, 2019, 4:02pm UTC](https://discuss.elastic.co/t/reporting-difference-logs-with-condition-on-visualize/192355/5 "2019-07-30T16:02:43Z")

</div>

My apologies for misunderstanding the question.

I don't know of any existing examples of how to do that outside of the Uptime app.

---

<div class="post-metadata">

**Author:** ![ntruonghau](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ntruonghau/32/50980_2.png) [@ntruonghau](https://discuss.elastic.co/u/ntruonghau)\
**Post date:** [July 31, 2019, 1:46am UTC](https://discuss.elastic.co/t/reporting-difference-logs-with-condition-on-visualize/192355/6 "2019-07-31T01:46:55Z")

</div>

Thanks for your help,  
We've just found another solution that use the exported csv of visualize to compare using python script. It would take some minutes to manual work with it, but the result is fine.  
Again, thanks for your help very much.  
Regards

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 28, 2019, 1:46am UTC](https://discuss.elastic.co/t/reporting-difference-logs-with-condition-on-visualize/192355/7 "2019-08-28T01:46:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
