# Issues with Canvas when using a time filter

**URL:** <https://discuss.elastic.co/t/issues-with-canvas-when-using-a-time-filter/269958>\
**Category:** Kibana\
**Created:** [April 13, 2021, 12:56am UTC](https://discuss.elastic.co/t/issues-with-canvas-when-using-a-time-filter/269958 "2021-04-13T00:56:52Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![azulgrana](https://avatars.discourse-cdn.com/v4/letter/a/df788c/32.png) [@azulgrana](https://discuss.elastic.co/u/azulgrana)\
**Post date:** [April 13, 2021, 12:56am UTC](https://discuss.elastic.co/t/issues-with-canvas-when-using-a-time-filter/269958/1 "2021-04-13T00:56:52Z")

</div>

Hi there!

I have a Canvas workpad with a few charts (metrics, horizontal bars, pie) that was working fine until I added a time filter. I added the time filter to take advantage of a timelion query I already have on the system. After adding the time filter my timelion line chart works great though all my other charts are showing the exclamation mark icon with the following error...

Whoops! Expression failed

Expression failed with the message:

[essql] \> Unexpected error from Elasticsearch: [verification\_exception] Found 1 problem line 1:59: Unknown index [xyz\*]

The queries I have on my charts are fairly simple like for example this metric query

SELECT ip\_src, timestamp FROM "xyz\*"

If I remove the time filter everything goes back to normal ... any ideas?

I appreciate any guidance

Thanks

Azulgrana

---

<div class="post-metadata">

**Author:** ![AClerk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aclerk/32/55297_2.png) [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Post date:** [April 13, 2021, 2:21am UTC](https://discuss.elastic.co/t/issues-with-canvas-when-using-a-time-filter/269958/2 "2021-04-13T02:21:42Z")

</div>

Do you have the filter in your script? Assigned groups?

> **[Canvas function reference | Kibana Guide \[master\] | Elastic](https://www.elastic.co/guide/en/kibana/master/canvas-function-reference.html#filters_fn)**

---

<div class="post-metadata">

**Author:** ![azulgrana](https://avatars.discourse-cdn.com/v4/letter/a/df788c/32.png) [@azulgrana](https://discuss.elastic.co/u/azulgrana)\
**Post date:** [April 13, 2021, 2:26am UTC](https://discuss.elastic.co/t/issues-with-canvas-when-using-a-time-filter/269958/3 "2021-04-13T02:26:06Z")

</div>

I'm not sure I follow you @AClerk. I'm not using a script, I'm doing everything thru the Canvas UI

---

<div class="post-metadata">

**Author:** ![azulgrana](https://avatars.discourse-cdn.com/v4/letter/a/df788c/32.png) [@azulgrana](https://discuss.elastic.co/u/azulgrana)\
**Post date:** [April 13, 2021, 3:03am UTC](https://discuss.elastic.co/t/issues-with-canvas-when-using-a-time-filter/269958/4 "2021-04-13T03:03:47Z")

</div>

It seems my queries work Ok if I switch them from essql to timelion, am I on the right track? is timelion the only type of queries that work when using a time filter ?

---

<div class="post-metadata">

**Author:** ![AClerk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aclerk/32/55297_2.png) [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Post date:** [April 13, 2021, 3:33am UTC](https://discuss.elastic.co/t/issues-with-canvas-when-using-a-time-filter/269958/5 "2021-04-13T03:33:38Z")

</div>

> [@azulgrana](#):
>
> I'm not sure I follow you

At the bottom of Canvas, you can open a script tab/editor.

> [@azulgrana](#):
>
> It seems my queries work Ok if I switch them from essql to timelion, am I on the right track? is timelion the only type of queries that work when using a time filter ?

No. esql is supported.

Watch [this](https://youtu.be/uV97aUjs50A?t=182) point of the video for example.  
After filters, you should give the group name.

---

<div class="post-metadata">

**Author:** ![azulgrana](https://avatars.discourse-cdn.com/v4/letter/a/df788c/32.png) [@azulgrana](https://discuss.elastic.co/u/azulgrana)\
**Post date:** [April 13, 2021, 3:48am UTC](https://discuss.elastic.co/t/issues-with-canvas-when-using-a-time-filter/269958/6 "2021-04-13T03:48:47Z")

</div>

Adding the group name to the filter did the trick. Thanks @AClerk !

Azulgrana

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 11, 2021, 3:48am UTC](https://discuss.elastic.co/t/issues-with-canvas-when-using-a-time-filter/269958/7 "2021-05-11T03:48:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
