# Simplify timerange discovery

**URL:** https://discuss.elastic.co/t/simplify-timerange-discovery/42748
**Category:** Kibana
**Created:** [February 25, 2016, 5:04pm UTC](https://discuss.elastic.co/t/simplify-timerange-discovery/42748 "2016-02-25T17:04:36Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![DerHerzog](https://avatars.discourse-cdn.com/v4/letter/d/f04885/32.png) [@DerHerzog](https://discuss.elastic.co/u/DerHerzog)
#### Post date: [February 25, 2016, 5:04pm UTC](https://discuss.elastic.co/t/simplify-timerange-discovery/42748/1 "2016-02-25T17:04:36Z")

</div>

I am using Kibana for log analysis. During the analysis i apply filters on loggers, threads etc., but then i can't see the unfiltered elements anymore. Any further investigation is complicated.

Therefore, answering the question "What happend in range of 1min where logger is blabla?" or "What happend before 1min where thread is blabla?" is very, very difficult.

**Example Scenario**

- An error occoured at 2016-02-25 10:00am, loggername is "org.a.common.logger", thread "worker-10"
- Doing the filtering Kibana shows only a this single log entry
- "What the heck is going on"?, "I've to look what happend before 10:00am, same thread"
- Entering complex search expression...
- "Damn i can't find my error anymore"... 🙂

**Featurerequest: advanced filtering for log-context**

- Provide simple way to get further logentries based on _the selected_ log entry
- Filtering should be timebased and contextbased using the visible fields
- The filter should answer the question "What happend [before|after|in range of] ...[intverval] where [field] is [current value]"

What do you think?

Best wishes,  
Philipp

---

<div class="post-metadata">

### Author: ![DerHerzog](https://avatars.discourse-cdn.com/v4/letter/d/f04885/32.png) [@DerHerzog](https://discuss.elastic.co/u/DerHerzog)
#### Post date: [February 25, 2016, 5:22pm UTC](https://discuss.elastic.co/t/simplify-timerange-discovery/42748/2 "2016-02-25T17:22:08Z")

</div>

Sorry, wrong forum. I created a feature request [https://github.com/elastic/kibana/issues/6334](https://github.com/elastic/kibana/issues/6334)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 2:01pm UTC](https://discuss.elastic.co/t/simplify-timerange-discovery/42748/3 "2017-07-06T14:01:10Z")

</div>


