# Visualise IP hits from IP range

**URL:** <https://discuss.elastic.co/t/visualise-ip-hits-from-ip-range/224857>\
**Category:** Kibana\
**Created:** [March 24, 2020, 2:13pm UTC](https://discuss.elastic.co/t/visualise-ip-hits-from-ip-range/224857 "2020-03-24T14:13:32Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![calanon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/calanon/32/64004_2.png) [@calanon](https://discuss.elastic.co/u/calanon)\
**Post date:** [March 24, 2020, 2:13pm UTC](https://discuss.elastic.co/t/visualise-ip-hits-from-ip-range/224857/1 "2020-03-24T14:13:32Z")

</div>

I want to visualise the amount of client IPs access our applications by capturing the IP from the ClientIP field and then applying this to the visualisations module in kibana for example.

10.10.10.0 to 10.10.10.254 Dept 1 - record how many IPs accesses from this range  
10.10.11.0 to 10.10.11.254 Dept 2 - record how many IPs accesses from this range  
10.10.12.0 to 10.10.12.254 Dept 3 - record how many IPs accesses from this range  
10.10.13.0 to 10.10.13.254 Dept 4 - record how many IPs accesses from this range

I have tried data tables, pie charts etc but I cannot see that they add the IP hits together because it only looks like an aggregation between all the ranges.

Can someone enlighten me on this?

---

<div class="post-metadata">

**Author:** ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)\
**Post date:** [March 25, 2020, 9:45am UTC](https://discuss.elastic.co/t/visualise-ip-hits-from-ip-range/224857/2 "2020-03-25T09:45:35Z")

</div>

It sounds like you want to split your series using the "IP Range" aggregation and visualize the unique count of the same field:

 ![Screenshot 2020-03-25 at 10.43.39](https://us1.discourse-cdn.com/elastic/original/3X/2/a/2a0d6cd8542eb48d61304ced1b97c9f70e5f3ca2.png)

This will give you the number of different IPs from each of the ranges that accessed your application at least once.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 22, 2020, 9:45am UTC](https://discuss.elastic.co/t/visualise-ip-hits-from-ip-range/224857/3 "2020-04-22T09:45:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
