# Find values of a field that appear after certain timestamp

**URL:** https://discuss.elastic.co/t/find-values-of-a-field-that-appear-after-certain-timestamp/209354
**Category:** Kibana
**Created:** [November 25, 2019, 6:17pm UTC](https://discuss.elastic.co/t/find-values-of-a-field-that-appear-after-certain-timestamp/209354 "2019-11-25T18:17:48Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![visioncloud](https://avatars.discourse-cdn.com/v4/letter/v/87869e/32.png) [@visioncloud](https://discuss.elastic.co/u/visioncloud)
#### Post date: [November 25, 2019, 6:17pm UTC](https://discuss.elastic.co/t/find-values-of-a-field-that-appear-after-certain-timestamp/209354/1 "2019-11-25T18:17:48Z")

</div>

I am exploring a query method in Kibana to filter the values of field in the index document that only appear after certain date and time, like yesterday. Sorry I am not familiar with the query syntax but curious why no one had the same challenge before.

Any help would be greatly appreciated.

Zhigang

---

<div class="post-metadata">

### Author: ![nickpeihl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nickpeihl/32/112622_2.png) [@nickpeihl](https://discuss.elastic.co/u/nickpeihl)
#### Post date: [November 25, 2019, 10:13pm UTC](https://discuss.elastic.co/t/find-values-of-a-field-that-appear-after-certain-timestamp/209354/2 "2019-11-25T22:13:32Z")

</div>

Hi @visioncloud. You can add a filter for a field that exists. And you can couple that with the values in the Date Picker. Here is an example.

 ![39%20PM](https://us1.discourse-cdn.com/elastic/original/3X/3/1/313b0ec6b904083bab11c23fdac9fab17965cf2c.png)

But maybe I am misunderstanding your question. If so, can you give me an example of documents you have and how you want to visualize them?

---

<div class="post-metadata">

### Author: ![visioncloud](https://avatars.discourse-cdn.com/v4/letter/v/87869e/32.png) [@visioncloud](https://discuss.elastic.co/u/visioncloud)
#### Post date: [November 25, 2019, 10:54pm UTC](https://discuss.elastic.co/t/find-values-of-a-field-that-appear-after-certain-timestamp/209354/3 "2019-11-25T22:54:00Z")

</div>

Thanks for the reply but I am looking for different filtering. Say I have these documents in my index  
{"device\_id": "aaaa", "event": "activated", "timestamp": "2019-08-24 15:15"}  
{"device\_id": "bbbb", "event": "activated", "timestamp": "2019-06-20 15:15"}  
{"device\_id": "aaaa", "event": "offline", "timestamp": "2019-11-24 15:15"}  
{"device\_id": "cccc", "event": "activated", "timestamp": "2019-11-25 15:15"}  
{"device\_id": "bbbb", "event": "offline", "timestamp": "2019-11-20 15:15"}

I want to find out the documents whose earliest timestamp is after a date, e.g., 2019-09-01, in this case I will get only device\_id "cccc". In short I am only looking for documents whose first timestamp is after a cutoff date.

Since I need to use filter in visualizations and I would like to how to use query in Kibana discover or filter query.

Thanks,

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 23, 2019, 10:54pm UTC](https://discuss.elastic.co/t/find-values-of-a-field-that-appear-after-certain-timestamp/209354/4 "2019-12-23T22:54:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.