TimeLion Query for adding in a field from index


#1

.es(index=logstash-Cat-res_17*).label('Count'),

I have the above query. i want to filter the results in Time Lion by Field_ID = Exits (I can do this on on Kibana Visualizations by adding a simple filter on the graph. But how do i write this into the query for Time Lion

Thanks


(Josh Dover) #2

You can use the q parameter in your .es() call to supply Lucene Query syntax. For example: .es(index=logstash-Cat-res_17*, q='responseCode:200').label('Count')

Just a tip, there's a "Help" button in the top right side of Timelion that shows documentation for each Timelion function and it's arguments. You can look in there for more info on each function.

Let me know if that doesn't work!