# Filter a string value in kibana Timelion

**URL:** https://discuss.elastic.co/t/filter-a-string-value-in-kibana-timelion/95161
**Category:** Kibana
**Tags:** timelion
**Created:** [July 31, 2017, 9:43am UTC](https://discuss.elastic.co/t/filter-a-string-value-in-kibana-timelion/95161 "2017-07-31T09:43:33Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![sLuvpreet33](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sluvpreet33/32/50626_2.png) [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)
#### Post date: [July 31, 2017, 9:43am UTC](https://discuss.elastic.co/t/filter-a-string-value-in-kibana-timelion/95161/1 "2017-07-31T09:43:33Z")

</div>

I have a status field.

It has 5 values.

1 - completed  
2 - pending  
3 - ongoing  
4 - cancelled  
5 - upcoming

I want to see 5 lines in Timelion over time, giving values corresponding to the status.

But I am not getting on how to do this.

This is the expression I am using for 2 lines,

```
.es(index=vogo-database-2, q='status:cancelled') .es(index=vogo-database-2, q='status:completed')

```

But there is no change in the timelion. I think the filter is not working.

Even this expression does not change anything,

```
.es(index=vogo-database-2) 

```

OR

.es(index='vogo-database-2')

How can I achieve what I want ?

---

<div class="post-metadata">

### Author: ![sLuvpreet33](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sluvpreet33/32/50626_2.png) [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)
#### Post date: [July 31, 2017, 9:49am UTC](https://discuss.elastic.co/t/filter-a-string-value-in-kibana-timelion/95161/2 "2017-07-31T09:49:29Z")

</div>

It is happening only on this index, and not any other.

What can be the reason for this ?

---

<div class="post-metadata">

### Author: ![weltenwort](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weltenwort/32/53885_2.png) [@weltenwort](https://discuss.elastic.co/u/weltenwort)
#### Post date: [July 31, 2017, 12:32pm UTC](https://discuss.elastic.co/t/filter-a-string-value-in-kibana-timelion/95161/3 "2017-07-31T12:32:51Z")

</div>

Hi @sLuvpreet33,

here are two points that come to mind:

- If the primary timestamp field of your index `vogo-database-2` is different from `@timestamp`, you can specify it in your query as in: `.es(index="vogo-database-2", timefield="YOUR_TIMEFIELD")`
- You should be able to draw these 5 lines with just one query using the `split` argument to `.es()`: `.es(index="vogo-database-2", timefield="YOUR_TIMEFIELD", split="status:10")`

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 28, 2017, 12:33pm UTC](https://discuss.elastic.co/t/filter-a-string-value-in-kibana-timelion/95161/4 "2017-08-28T12:33:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
