# Exclude Include options syntax in Kibana visualization

**URL:** <https://discuss.elastic.co/t/exclude-include-options-syntax-in-kibana-visualization/241609>\
**Category:** Kibana\
**Created:** [July 17, 2020, 8:24am UTC](https://discuss.elastic.co/t/exclude-include-options-syntax-in-kibana-visualization/241609 "2020-07-17T08:24:24Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![pk.241011](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pk.241011/32/86285_2.png) [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Post date:** [July 17, 2020, 8:24am UTC](https://discuss.elastic.co/t/exclude-include-options-syntax-in-kibana-visualization/241609/1 "2020-07-17T08:24:24Z")

</div>

I am creating a visualization. On x-axis I am doing a terms aggregation.

What is the right way for provide a series of values to be included.

This works.  
 ![works](https://us1.discourse-cdn.com/elastic/original/3X/a/c/accb507409a68c5e5a72f347377fee51e9ab3a7b.jpeg)

This does not.  
 ![doesnotwork](https://us1.discourse-cdn.com/elastic/original/3X/7/c/7c80d630917e4d452cd1bd2bf817ba8e8ee90ea8.jpeg)

As per the [documentation](https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-terms-aggregation.html#_filtering_values_2), a series of terms should have worked.

" For matching based on exact values the `include` and `exclude` parameters can simply take an array of strings that represent the terms as they are found in the index:"

```
"ActiveCarManufacturers" : {
         "terms" : {
             "field" : "make",
             "exclude" : ["rover", "jensen"]
         }
     }

```

I tried with:  
{"Volume\_Run\_01","Volume\_Run\_02"}  
and  
["Volume\_Run\_01","Volume\_Run\_02"]

Still no luck.

---

<div class="post-metadata">

**Author:** ![S0ul](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/s0ul/32/46431_2.png) [@S0ul](https://discuss.elastic.co/u/S0ul)\
**Post date:** [July 17, 2020, 8:38am UTC](https://discuss.elastic.co/t/exclude-include-options-syntax-in-kibana-visualization/241609/2 "2020-07-17T08:38:01Z")

</div>

Hi pk.241011,

don't worry about brackets and quotes, if you're using kibana you just have to type your list and separate with the character "|".  
 ![Include](https://us1.discourse-cdn.com/elastic/original/3X/d/5/d5e3237c0b50f50f40e3f9559c0929295421388e.png)

Regards,  
S0ul

---

<div class="post-metadata">

**Author:** ![pk.241011](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pk.241011/32/86285_2.png) [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Post date:** [July 17, 2020, 12:43pm UTC](https://discuss.elastic.co/t/exclude-include-options-syntax-in-kibana-visualization/241609/3 "2020-07-17T12:43:14Z")

</div>

Hey thanks a lot. It works !!!  
Where is this documented?

---

<div class="post-metadata">

**Author:** ![S0ul](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/s0ul/32/46431_2.png) [@S0ul](https://discuss.elastic.co/u/S0ul)\
**Post date:** [July 17, 2020, 1:32pm UTC](https://discuss.elastic.co/t/exclude-include-options-syntax-in-kibana-visualization/241609/4 "2020-07-17T13:32:46Z")

</div>

To be honest I dont know ^^ I just tried differents syntax and it react to caracters used in logic gates like | or &, without quote.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 14, 2020, 1:32pm UTC](https://discuss.elastic.co/t/exclude-include-options-syntax-in-kibana-visualization/241609/5 "2020-08-14T13:32:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
