Visualize data from multiple indexes in one chart

[Mehak_Bhargava]

Hi @LizaD, thanks for replying!
For index pattern, I am not sure if it will work because my index1 is called obapi, index2 is called rmmserver, and index3 is called dispatcher with all different names. Since they dont have similarity in naming, can one index pattern still be created for them? Because then I could make it work with my charts!

If not, is there a way that I can make a chart based on a field called type for instance, that occurs in all these three indexes? So aggregation will be solely based on field name!

I read this post which discussed that as long as I have field name same- "type" I can create a series?

How to plot multiple series by multiple indexes into one visualization?

in the panel settings of time series visual builder you can override the index pattern. you can even set it to * (to look at all index patterns). the only requirement is that all your index patterns have the same time field (for example @timestamp). then you can plot metrics on fields from different indexes. you could also do the same using timelion, without the restriction of same time field: .es(index=myfirstindex, timefield=timestamp, metric=sum:bytes), .es(index=secondindex, timefield=tim…