# Would like to create a visulization that show ERROR, WARN and INFO

**URL:** https://discuss.elastic.co/t/would-like-to-create-a-visulization-that-show-error-warn-and-info/247189
**Category:** Kibana
**Created:** [September 2, 2020, 8:30am UTC](https://discuss.elastic.co/t/would-like-to-create-a-visulization-that-show-error-warn-and-info/247189 "2020-09-02T08:30:56Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![111363](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/111363/32/71708_2.png) [@111363](https://discuss.elastic.co/u/111363)
#### Post date: [September 2, 2020, 8:30am UTC](https://discuss.elastic.co/t/would-like-to-create-a-visulization-that-show-error-warn-and-info/247189/1 "2020-09-02T08:30:56Z")

</div>

Hi,

I am trying to create visualization that show per specific log the count of ERROR, WARN & INFO messages.  
I have tried to create the json input for getting all to message filed that contains [ERROR] but it did not show any.

How can I make it?  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/2/c2e32b76ddb3dd0a8ed9dc3b32beff89081e228a.png)  
Thanks,  
Yaniv

---

<div class="post-metadata">

### Author: ![ylasri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ylasri/32/86120_2.png) [@ylasri](https://discuss.elastic.co/u/ylasri)
#### Post date: [September 2, 2020, 8:36am UTC](https://discuss.elastic.co/t/would-like-to-create-a-visulization-that-show-error-warn-and-info/247189/2 "2020-09-02T08:36:54Z")

</div>

You can add the error type bucket to your aggregtation

![image](https://us1.discourse-cdn.com/elastic/original/3X/b/d/bd361b154dc32149b6132f346b98ddd25833a05c.png)

or use the filter aggregation as a bucket in your viz

![image](https://us1.discourse-cdn.com/elastic/original/3X/3/f/3ff1bfff35110211c6d391661b892d5b84a53ec8.png)

---

<div class="post-metadata">

### Author: ![111363](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/111363/32/71708_2.png) [@111363](https://discuss.elastic.co/u/111363)
#### Post date: [September 2, 2020, 9:50am UTC](https://discuss.elastic.co/t/would-like-to-create-a-visulization-that-show-error-warn-and-info/247189/3 "2020-09-02T09:50:41Z")

</div>

Tried:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/0/b0e1604cf777f0810a7e03903a6b0182c848c412.png)  
What do I do wrong?

---

<div class="post-metadata">

### Author: ![ylasri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ylasri/32/86120_2.png) [@ylasri](https://discuss.elastic.co/u/ylasri)
#### Post date: [September 2, 2020, 9:56am UTC](https://discuss.elastic.co/t/would-like-to-create-a-visulization-that-show-error-warn-and-info/247189/4 "2020-09-02T09:56:54Z")

</div>

That should work if the field message is mapped as text

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/1/210f64793c7cdebe52c1d06c37e15a9945c4714c.png)

---

<div class="post-metadata">

### Author: ![111363](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/111363/32/71708_2.png) [@111363](https://discuss.elastic.co/u/111363)
#### Post date: [September 2, 2020, 10:02am UTC](https://discuss.elastic.co/t/would-like-to-create-a-visulization-that-show-error-warn-and-info/247189/5 "2020-09-02T10:02:58Z")

</div>

It gives me results while Discovering: ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/d/4daa9972dd0196598811321f599999b2a2d8e36e.png)

Does not it means it text?

---

<div class="post-metadata">

### Author: ![ylasri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ylasri/32/86120_2.png) [@ylasri](https://discuss.elastic.co/u/ylasri)
#### Post date: [September 2, 2020, 10:04am UTC](https://discuss.elastic.co/t/would-like-to-create-a-visulization-that-show-error-warn-and-info/247189/6 "2020-09-02T10:04:28Z")

</div>

Yes if it gives results on discovery it should give same in viz

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 30, 2020, 10:04am UTC](https://discuss.elastic.co/t/would-like-to-create-a-visulization-that-show-error-warn-and-info/247189/7 "2020-09-30T10:04:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.