# How does Timelion process buckets?

**URL:** <https://discuss.elastic.co/t/how-does-timelion-process-buckets/117946>\
**Category:** Kibana\
**Tags:** timelion\
**Created:** [February 1, 2018, 6:58am UTC](https://discuss.elastic.co/t/how-does-timelion-process-buckets/117946 "2018-02-01T06:58:36Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![varunlpai](https://avatars.discourse-cdn.com/v4/letter/v/34f0e0/32.png) [@varunlpai](https://discuss.elastic.co/u/varunlpai)\
**Post date:** [February 1, 2018, 6:58am UTC](https://discuss.elastic.co/t/how-does-timelion-process-buckets/117946/1 "2018-02-01T06:58:36Z")

</div>

Hi,  
When using the Timelion plugin on Kibana, there is an option to select the aggregation bucket. When you add this formula to the dashboard, does Timelion aggregate and create buckets as data comes into elastic search, or does it perform repeated querying every time the time filter is changed on the dashboard?  
I was wondering about the time implications of repeated querying of logs over huge datasets.

---

<div class="post-metadata">

**Author:** ![jbudz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jbudz/32/45922_2.png) [@jbudz](https://discuss.elastic.co/u/jbudz)\
**Post date:** [February 1, 2018, 5:27pm UTC](https://discuss.elastic.co/t/how-does-timelion-process-buckets/117946/2 "2018-02-01T17:27:41Z")

</div>

The Kibana server for the most part relies on elasticsearch for state. Visualizations (not limited to timelion) will re-query on state changes. Your concern on performance is valid one, especially over large time ranges.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 1, 2018, 5:27pm UTC](https://discuss.elastic.co/t/how-does-timelion-process-buckets/117946/3 "2018-03-01T17:27:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
