# Split bars on visualisation by using custom query
**URL:** https://discuss.elastic.co/t/split-bars-on-visualisation-by-using-custom-query/138411
**Category:** Kibana
**Created:** [July 3, 2018, 2:48pm UTC](https://discuss.elastic.co/t/split-bars-on-visualisation-by-using-custom-query/138411 "2018-07-03T14:48:02Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@byakku](https://discuss.elastic.co/u/byakku)
#### Post date: [July 3, 2018, 2:48pm UTC](https://discuss.elastic.co/t/split-bars-on-visualisation-by-using-custom-query/138411/1 "2018-07-03T14:48:02Z")
Hello everyone.
I have two folders in my source (using wildcards) and I have created visualisation based on this.
The big picture is that, I'm visualising amount of errors/failed builds from Jenkins log, now I want to be more specific and I want to split bars into specific reasons of failures.
I have a query with visualisation for total count of failed builds and I have query with visualisation for specific errors that makes the build fail.
I want to aggregate them into bars and visualise total amount of builds and amount of specific errors that caused build to fail, with daily timestamp.
Example below
I can't find proper option in 'Split series'. Could someone guide me through that or give some advices where to start or if it's even possible?
> **[Screenshot](https://prnt.sc/k22l4w)**
>
> Captured with Lightshot
Greetings
---
### Author:  [@spalger](https://discuss.elastic.co/u/spalger)
#### Post date: [July 3, 2018, 6:39pm UTC](https://discuss.elastic.co/t/split-bars-on-visualisation-by-using-custom-query/138411/2 "2018-07-03T18:39:23Z")
You're so close, you probably want to scroll down the aggregation list a bit and choose the "terms" aggregation for splitting your bars based on the field that indicates what the cause for the error is.
---
### Author:  [@byakku](https://discuss.elastic.co/u/byakku)
#### Post date: [July 4, 2018, 1:04pm UTC](https://discuss.elastic.co/t/split-bars-on-visualisation-by-using-custom-query/138411/3 "2018-07-04T13:04:11Z")
I have no correct term displayed there.
I'm clicking Add sub-buckets, Split Series, then I can select aggregation but nothing from Terms matches my needs.
Visualisation is based on simple query that counts all log entries and that's all, maybe I missed some particular step?
---
### Author:  [@spalger](https://discuss.elastic.co/u/spalger)
#### Post date: [July 4, 2018, 10:16pm UTC](https://discuss.elastic.co/t/split-bars-on-visualisation-by-using-custom-query/138411/4 "2018-07-04T22:16:40Z")
If you scroll here, you don’t see “Terms” under “Significant Terms”?
---
### Author:  [@byakku](https://discuss.elastic.co/u/byakku)
#### Post date: [July 5, 2018, 1:44pm UTC](https://discuss.elastic.co/t/split-bars-on-visualisation-by-using-custom-query/138411/5 "2018-07-05T13:44:23Z")
I can pick Terms but I have preconfigured terms there.
> **[Screenshot](https://prnt.sc/k2w6xr)**
>
> Captured with Lightshot
My visualisation is based on query
`source:*CLOUD* AND "Finished: FAILURE"`
but when I do
`source:*CLOUD* AND "docker prune -f"`
I ALSO have listed failed builds but only these failed by docker error, ergo bars are showing lets say 10% of error that are shown in previous query. I don't see a proper field that, so I have no clue how to go further with this, despite that it's super basic problem. 😕
---
### Author:  [@spalger](https://discuss.elastic.co/u/spalger)
#### Post date: [July 5, 2018, 3:37pm UTC](https://discuss.elastic.co/t/split-bars-on-visualisation-by-using-custom-query/138411/6 "2018-07-05T15:37:37Z")
I’m sorry, I’m not sure I understand, but if you’re trying to define the splits with individual queries that you can use the “Filters” bucket aggregation time
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 2, 2018, 3:44pm UTC](https://discuss.elastic.co/t/split-bars-on-visualisation-by-using-custom-query/138411/7 "2018-08-02T15:44:56Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.