In my log files, I have data that represents a the hierarchy of items, much like an http log file might show the hierarchy of a website.

I may have data such as this

```
41 2016-01-01 01:41:32-500 show:category:all
41 2016-01-01 04:11:20-500 show:category:animals
42 2016-01-02 01:41:32-500 show:item:wallaby
42 2016-01-02 01:41:32-500 show:home

```

and I would have 3 items in here... `%{NUMBER:terminal}` `%{TIMESTAMP_ISO8601:ts}` and `(?<info>([^\r])*)`

I parse the **info** data into an array using `mutate` and `split` to convert `lvl1:lvl2:lvl3` into `['lvl1','lvl2','lvl3']`.

I'm interested in aggregating the data to get counts at various levels easily, such as counting all records where `info[0]` is the same or where `info[0]` and `info[1]` are the same. (and be able to select time range and terminal)

Is there a way to set up kibana to visualize this kind of information?
Or should I change the way the filter is matching the data to make the data easier to access?
the depth of levels varies but I can be pretty certain that the max levels are 5, so I could parse the text into various fields `lvl1` `lvl2` `lvl3` `lvl4` `lvl5` instead of putting them in an array.