# Timelion Daily Totals
**URL:** https://discuss.elastic.co/t/timelion-daily-totals/235846
**Category:** Kibana
**Tags:** timelion
**Created:** [June 4, 2020, 8:31pm UTC](https://discuss.elastic.co/t/timelion-daily-totals/235846 "2020-06-04T20:31:43Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@cburling](https://discuss.elastic.co/u/cburling)
#### Post date: [June 4, 2020, 8:31pm UTC](https://discuss.elastic.co/t/timelion-daily-totals/235846/1 "2020-06-04T20:31:43Z")
Hello. I am trying to work in Timelion to show the total number of events received per day (24hour period). Instead, I keep getting the totals growing each day. I have included the "interval=24h" option. Is there a way to have it show the totals each day? I'm new to this and trying to learn as I go.
Thank you in advance for any comments, suggestions, or examples you share.
---
### Author:  [@Vadims\_Daleckis](https://discuss.elastic.co/u/Vadims_Daleckis)
#### Post date: [June 5, 2020, 10:35am UTC](https://discuss.elastic.co/t/timelion-daily-totals/235846/2 "2020-06-05T10:35:16Z")
Hi @cburling,
Could you please paste your Timelion expression?
---
### Author:  [@cburling](https://discuss.elastic.co/u/cburling)
#### Post date: [June 5, 2020, 1:17pm UTC](https://discuss.elastic.co/t/timelion-daily-totals/235846/3 "2020-06-05T13:17:00Z")
Thanks Vadim. Here is the expression:
`.es(index=data-leakage*,metric=count,interval=24h,split=data_type.keyword:40,q="NOT data_type:GeneralStatus").label(regex="^.* > data_type.keyword:(\S+) > .*",label="$1").lines(fill=1,width=1).color(blue).title('Data Leakage - # of Records').legend(columns=4,position=nw)`
---
### Author:  [@cburling](https://discuss.elastic.co/u/cburling)
#### Post date: [June 9, 2020, 6:09pm UTC](https://discuss.elastic.co/t/timelion-daily-totals/235846/4 "2020-06-09T18:09:22Z")
@Vadims_Daleckis have you had a chance to check this? Thank you in advance for your assistance.
---
### Author:  [@Vadims\_Daleckis](https://discuss.elastic.co/u/Vadims_Daleckis)
#### Post date: [June 15, 2020, 1:14pm UTC](https://discuss.elastic.co/t/timelion-daily-totals/235846/5 "2020-06-15T13:14:31Z")
The `interval=24h` parameter itself should not start accumulating the data, at least when I tried it.
I've looked at your Timelion expression and I cannot see anything that should make it accumulate the data. But there is one trick you can do: you can create two time series offset by one day, and compute the difference between them. Something like this:
```
es(..., interval=24h).subtract(
es(..., interval=24h, offset=-1d)
)
```
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 13, 2020, 1:14pm UTC](https://discuss.elastic.co/t/timelion-daily-totals/235846/6 "2020-07-13T13:14:35Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.