# Kibana timelion, if(request.basic=='some string')

**URL:** <https://discuss.elastic.co/t/kibana-timelion-if-request-basic-some-string/112081>\
**Category:** Kibana\
**Tags:** timelion\
**Created:** [December 16, 2017, 11:03am UTC](https://discuss.elastic.co/t/kibana-timelion-if-request-basic-some-string/112081 "2017-12-16T11:03:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![p0f1g1st](https://avatars.discourse-cdn.com/v4/letter/p/b4bc9f/32.png) [@p0f1g1st](https://discuss.elastic.co/u/p0f1g1st)\
**Post date:** [December 16, 2017, 11:03am UTC](https://discuss.elastic.co/t/kibana-timelion-if-request-basic-some-string/112081/1 "2017-12-16T11:03:52Z")

</div>

Hello! I have a query for the most active account and his cost of calls:  
`.es(index='billing', split=account.from.number:1, metric=sum:respond.cost)`  
And I need to compare if some\_string\_field='some text' of that account. How can I compare string values in timelion?

---

<div class="post-metadata">

**Author:** ![timroes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timroes/32/19712_2.png) [@timroes](https://discuss.elastic.co/u/timroes)\
**Post date:** [December 22, 2017, 9:09am UTC](https://discuss.elastic.co/t/kibana-timelion-if-request-basic-some-string/112081/2 "2017-12-22T09:09:06Z")

</div>

Hey Alex,

sorry for the late response. Do you mean you want to filter just for specific documents before calculating sum of that account? In this case you just want to use the `q`(uery) parameter:

```auto
.es(index='billing', split=account.from.number:1, metric=sum:respond.cost, q='request.basic:"some string"')

```

The query is of the same format, than any query you can put in the query bar on top of dashboard/visualize/discover. So it should match that format.

Cheers,  
Tim

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 19, 2018, 9:09am UTC](https://discuss.elastic.co/t/kibana-timelion-if-request-basic-some-string/112081/3 "2018-01-19T09:09:16Z")

</div>

Closed on January 19, 2018, 9:09am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.