Timelion - clause.split is not a function

[Sjaak01 (Sjaak)]

Hi,

I'm trying to build a query that sums up netflow traffic based on a location field that I've added to my data so I can graph data based on the location.

Is what I started with. This appears to be working well apart from some weird spikey graphs if I zoom in on the data too much but that is a different story.

I've tried adding the index and query I want to search for but this error in the thread title. What am I doing wrong?

I want to sum up the bytes when the location name field is location a.

[spalger (Spencer Alger)]

@Sjaak01

.es(index=netflow-*,q=location_name:Location A,metric='sum:netflow.in_bytes')

I think you just need to wrap your q argument in quotes because it has a space:

.es(index=netflow-*,q='location_name:Location A',metric='sum:netflow.in_bytes')