# Time series for a particular field in the dataset - No Luck using Timelion

**URL:** <https://discuss.elastic.co/t/time-series-for-a-particular-field-in-the-dataset-no-luck-using-timelion/45055>\
**Category:** Kibana\
**Created:** [March 21, 2016, 10:41pm UTC](https://discuss.elastic.co/t/time-series-for-a-particular-field-in-the-dataset-no-luck-using-timelion/45055 "2016-03-21T22:41:56Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![naveen\_elastic](https://avatars.discourse-cdn.com/v4/letter/n/aca169/32.png) [@naveen\_elastic](https://discuss.elastic.co/u/naveen_elastic)\
**Post date:** [March 21, 2016, 10:41pm UTC](https://discuss.elastic.co/t/time-series-for-a-particular-field-in-the-dataset-no-luck-using-timelion/45055/1 "2016-03-21T22:41:56Z")

</div>

Hi,

I am a beginner, trying to see time series for a particular field in the dataset. My dataset looks like below

{Application:"XXX", timestamp:"", "numofcalculations":1276, "timestamp":2016-03-16T 10:28:08.089Z"}  
{Application:"XXX", timestamp:"", "numofcalculations":700, "timestamp":2016-03-16T 22:30:06.012Z"}  
{Application:"XXX", timestamp:"", "numofcalculations":400, "timestamp":2016-03-16T 09:17:45.652Z"}

I want to see "numofcalculations" over time (timestamp). I have already spent lot of time, but no luck. This field starts from an unknown random value (\>0).

Here is what I used, which didn't work- .es(index='logstash-\*',terms='numcalcs').derivative()

Any help would be appreciated. Thanks.

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [March 25, 2016, 12:34am UTC](https://discuss.elastic.co/t/time-series-for-a-particular-field-in-the-dataset-no-luck-using-timelion/45055/2 "2016-03-25T00:34:26Z")

</div>

To see a particular field, you should use the `metric=` argument in the `.es()` function. The trick is that you can't display raw values, but you have to aggregate them per bucket, or time interval. So the syntax is `metric=agg:name`. So in your case it would be something like `.es(metric=avg:numofcalculations)`

 ![](https://us1.discourse-cdn.com/elastic/original/2X/d/d904c8afbd951cd6ba0a53442468bd4ffc01571a.png)

---

<div class="post-metadata">

**Author:** ![naveen\_elastic](https://avatars.discourse-cdn.com/v4/letter/n/aca169/32.png) [@naveen\_elastic](https://discuss.elastic.co/u/naveen_elastic)\
**Post date:** [April 3, 2016, 12:32am UTC](https://discuss.elastic.co/t/time-series-for-a-particular-field-in-the-dataset-no-luck-using-timelion/45055/3 "2016-04-03T00:32:50Z")

</div>

Thank you Tanya.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:57pm UTC](https://discuss.elastic.co/t/time-series-for-a-particular-field-in-the-dataset-no-luck-using-timelion/45055/4 "2017-07-06T13:57:03Z")

</div>


