Timelion - clause.split is not a function

Hi,

I'm trying to build a query that sums up netflow traffic based on a location field that I've added to my data so I can graph data based on the location.

Is what I started with. This appears to be working well apart from some weird spikey graphs if I zoom in on the data too much but that is a different story.

I've tried adding the index and query I want to search for but this error in the thread title. What am I doing wrong?

I want to sum up the bytes when the location name field is location a.

I think you just need to wrap your q argument in quotes because it has a space:

.es(index=netflow-*,q='location_name:Location A',metric='sum:netflow.in_bytes')

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.