# Kibana Timelion: how to query a specific value expression with space

**URL:** <https://discuss.elastic.co/t/kibana-timelion-how-to-query-a-specific-value-expression-with-space/131327>\
**Category:** Kibana\
**Tags:** timelion\
**Created:** [May 10, 2018, 3:32pm UTC](https://discuss.elastic.co/t/kibana-timelion-how-to-query-a-specific-value-expression-with-space/131327 "2018-05-10T15:32:33Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![jen-huang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jen-huang/32/74327_2.png) [@jen-huang](https://discuss.elastic.co/u/jen-huang)\
**Post date:** [May 10, 2018, 6:58pm UTC](https://discuss.elastic.co/t/kibana-timelion-how-to-query-a-specific-value-expression-with-space/131327/5 "2018-05-10T18:58:39Z")

</div>

> [@narschang](#):
>
> (found\_in\_rv:"9.0" OR found\_in\_rv:"AGM 9.0")

This looks correct. What is the mapping of `found_in_rv` field?

If type is set to `text`, querying for `9.0` will match both `9.0` and `AGM 9.0` (so there is no need for the second `OR` condition.

If type is set to `keyword`, querying for `9.0` will only match `9.0`.

Elasticsearch may have created `found_in_rv.keyword` for you as well, so you can try:  
`(found_in_rv.keyword:"9.0" OR found_in_rv.keyword:"AGM 9.0")`

More information here: [Timelion query - #2 by Stacey\_Gammon](https://discuss.elastic.co/t/timelion-query/107050/2)

---

_[View the full topic](https://discuss.elastic.co/t/kibana-timelion-how-to-query-a-specific-value-expression-with-space/131327)._
