# Timelion - clause.split is not a function

**URL:** https://discuss.elastic.co/t/timelion-clause-split-is-not-a-function/83321
**Category:** Kibana
**Created:** [April 23, 2017, 12:36pm UTC](https://discuss.elastic.co/t/timelion-clause-split-is-not-a-function/83321 "2017-04-23T12:36:24Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Sjaak01](https://avatars.discourse-cdn.com/v4/letter/s/73ab20/32.png) [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)
#### Post date: [April 23, 2017, 12:36pm UTC](https://discuss.elastic.co/t/timelion-clause-split-is-not-a-function/83321/1 "2017-04-23T12:36:24Z")

</div>

Hi,

I'm trying to build a query that sums up netflow traffic based on a location field that I've added to my data so I can graph data based on the location.

```auto

```

Is what I started with. This appears to be working well apart from some weird spikey graphs if I zoom in on the data too much but that is a different story.

I've tried adding the index and query I want to search for but this error in the thread title. What am I doing wrong?

```auto

```

I want to sum up the bytes when the location name field is location a.

---

<div class="post-metadata">

### Author: ![spalger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spalger/32/14092_2.png) [@spalger](https://discuss.elastic.co/u/spalger)
#### Post date: [April 24, 2017, 10:32pm UTC](https://discuss.elastic.co/t/timelion-clause-split-is-not-a-function/83321/2 "2017-04-24T22:32:34Z")

</div>

> [@Sjaak01](#):
>
> .es(index=netflow-\*,q=location\_name:Location A,metric='sum:netflow.in\_bytes')

I think you just need to wrap your `q` argument in quotes because it has a space:

```auto
.es(index=netflow-*,q='location_name:Location A',metric='sum:netflow.in_bytes')

```

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 22, 2017, 10:39pm UTC](https://discuss.elastic.co/t/timelion-clause-split-is-not-a-function/83321/3 "2017-05-22T22:39:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.