# Scripting dynamic Elasticsearch queries inside Kibana visualization?

**URL:** <https://discuss.elastic.co/t/scripting-dynamic-elasticsearch-queries-inside-kibana-visualization/40761>\
**Category:** Kibana\
**Created:** [February 2, 2016, 4:39pm UTC](https://discuss.elastic.co/t/scripting-dynamic-elasticsearch-queries-inside-kibana-visualization/40761 "2016-02-02T16:39:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![RJ\_Militante](https://avatars.discourse-cdn.com/v4/letter/r/a9adbd/32.png) [@RJ\_Militante](https://discuss.elastic.co/u/RJ_Militante)\
**Post date:** [February 2, 2016, 4:39pm UTC](https://discuss.elastic.co/t/scripting-dynamic-elasticsearch-queries-inside-kibana-visualization/40761/1 "2016-02-02T16:39:47Z")

</div>

Hi I'm new to the ELK stack. I'm using Kibana 4.1. I've managed to use the Elasticsearch Query DSL to run searches within Kibana's Discover interface to capture a data set, then used that saved search to create a new Visualization and Dashboard widget in Kibana. My Elasticsearch query looks like

{  
"bool" : {  
"must" : [  
{  
"match" : { "service" : "servicename" }  
},  
{  
"match\_phrase" : { "msg" : "Trying to get security token for user: joe" }  
}  
],  
"minimum\_should\_match" : 1,  
"boost" : 1.0  
}  
}

-this would capture any login events for user: joe. If i wanted to search for login events for user: sue I'd have to change this part of the above query query to look like

```
            "match_phrase" : { "msg" : "Trying to get security token for user: sue" }

```

I was asked to see if there was a way I could use Elasticsearch Query DSL from the Kibana Discover tab or from curl on the command line - to create a dynamic query that would allow us to search for login events of various users, and then create a new visualization.

I think this is possible, I'm not sure what the best way to do this in Elasticsearch/Kibana. Can anyone point me in the right direction on how to go about this? Thanks!

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [February 8, 2016, 7:16pm UTC](https://discuss.elastic.co/t/scripting-dynamic-elasticsearch-queries-inside-kibana-visualization/40761/2 "2016-02-08T19:16:39Z")

</div>

The only thing I can think of is to make the saved search less strict by omitting the user name and using a pinned editable filter to match the specific user.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:03pm UTC](https://discuss.elastic.co/t/scripting-dynamic-elasticsearch-queries-inside-kibana-visualization/40761/3 "2017-07-06T14:03:13Z")

</div>