# SNMP Dashboard - Can you select a 'field' with wildcard so that it can handle multiple vendors' OIDs?

**URL:** <https://discuss.elastic.co/t/snmp-dashboard-can-you-select-a-field-with-wildcard-so-that-it-can-handle-multiple-vendors-oids/100915>\
**Category:** Kibana\
**Created:** [September 18, 2017, 6:31pm UTC](https://discuss.elastic.co/t/snmp-dashboard-can-you-select-a-field-with-wildcard-so-that-it-can-handle-multiple-vendors-oids/100915 "2017-09-18T18:31:30Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![adnil](https://avatars.discourse-cdn.com/v4/letter/a/dc4da7/32.png) [@adnil](https://discuss.elastic.co/u/adnil)\
**Post date:** [September 18, 2017, 6:31pm UTC](https://discuss.elastic.co/t/snmp-dashboard-can-you-select-a-field-with-wildcard-so-that-it-can-handle-multiple-vendors-oids/100915/1 "2017-09-18T18:31:31Z")

</div>

New to ELK and trying to create a dashboard that displays SNMP traps from multiple vendors' devices. Would like to create a general table that can display traps from all vendors. However, when the drop-down for 'field' has listing from each OID that is in ElasticSearch. Is it possible to create a generic or wildcard field, say, 'SNMPv2-SMI::enterprises.\*'?

Or perhaps what is the best way to handle multiple MIBs?

thanks

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [September 18, 2017, 8:02pm UTC](https://discuss.elastic.co/t/snmp-dashboard-can-you-select-a-field-with-wildcard-so-that-it-can-handle-multiple-vendors-oids/100915/2 "2017-09-18T20:02:28Z")

</div>

If you create some visualization that has a list of the terms you would like to be able to filter on, then when you click on one of those it should filter everything on the dashboard by that.

So for example, I created a Data Table and Split Rows with a Filters aggregation. You can use whatever field and values with wildcards you like. In my first filter I added `metricset.name:cpu` and `metricset.name:load` so it includes docs with either of those values.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/3/13ec48f62270751458d22bef396d5b13cccb686f.png)

Then I added this new visualization to an existing metricbeat dashboard. Now I can mouse-over any of those filters and click on the `+` to add a filter to the dashboard like that. The just delete the filter when you want all results again.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/e/6efe48d5e62c67540e3b8adc2f65f8005a582a92.png)

Regards,  
Lee

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 16, 2017, 8:02pm UTC](https://discuss.elastic.co/t/snmp-dashboard-can-you-select-a-field-with-wildcard-so-that-it-can-handle-multiple-vendors-oids/100915/3 "2017-10-16T20:02:33Z")

</div>

Closed on October 16, 2017, 8:02pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.