# Timelion query not working

**URL:** <https://discuss.elastic.co/t/timelion-query-not-working/228194>\
**Category:** Kibana\
**Tags:** timelion\
**Created:** [April 15, 2020, 7:11pm UTC](https://discuss.elastic.co/t/timelion-query-not-working/228194 "2020-04-15T19:11:28Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![marrel](https://avatars.discourse-cdn.com/v4/letter/m/a4c791/32.png) [@marrel](https://discuss.elastic.co/u/marrel)\
**Post date:** [April 15, 2020, 7:11pm UTC](https://discuss.elastic.co/t/timelion-query-not-working/228194/1 "2020-04-15T19:11:28Z")

</div>

Hello!

I have developed a graph in Timelion but I faced a problem with the query. I do not get any line.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/0/40ac0133a28d61cd37f6ba72e134fbe761402f8a.png)

> .es(index=machinebeat\*, timefield=@timestamp, q='topic: product/group\_a/\*').label('Group A')

The query should collect all products from group A.

Topic field contains the following values:  
product/group\_a/102  
product/group\_a/506  
product/group\_a/964  
product/group\_b/102 .. etc

Is my query correct? Any advice?

Thank you in advance!

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [April 16, 2020, 12:47pm UTC](https://discuss.elastic.co/t/timelion-query-not-working/228194/2 "2020-04-16T12:47:48Z")

</div>

Well the first question would be what kind of field is the `topic`field? Is it analyzed or not?

---

<div class="post-metadata">

**Author:** ![marrel](https://avatars.discourse-cdn.com/v4/letter/m/a4c791/32.png) [@marrel](https://discuss.elastic.co/u/marrel)\
**Post date:** [April 21, 2020, 9:00am UTC](https://discuss.elastic.co/t/timelion-query-not-working/228194/3 "2020-04-21T09:00:02Z")

</div>

The mapping for the `topic` field is as following:

```
"prdcat" : {
    "properties" : {
      "topic" : {
        "type" : "text",
        "fields" : {
          "keyword" : {
            "type" : "keyword"
          }
        }
      }
    }
}
```

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [April 30, 2020, 4:09pm UTC](https://discuss.elastic.co/t/timelion-query-not-working/228194/4 "2020-04-30T16:09:54Z")

</div>

Can you try with the field `topic.keyword`?

---

<div class="post-metadata">

**Author:** ![marrel](https://avatars.discourse-cdn.com/v4/letter/m/a4c791/32.png) [@marrel](https://discuss.elastic.co/u/marrel)\
**Post date:** [May 7, 2020, 8:07am UTC](https://discuss.elastic.co/t/timelion-query-not-working/228194/5 "2020-05-07T08:07:35Z")

</div>

I deleted the index, in order to change the mapping and use the "keyword" analyzer for my case. then I used:

`.es(index=machinebeat*, timefield=@timestamp, q=topic:product\/group_a\/*).label('Group A')`

Now it is working. Thank you for your support.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 4, 2020, 8:07am UTC](https://discuss.elastic.co/t/timelion-query-not-working/228194/6 "2020-06-04T08:07:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.