# Timelion query spaces **URL:** \ **Category:** Kibana\ **Tags:** timelion\ **Created:** [March 30, 2018, 11:13am UTC](https://discuss.elastic.co/t/timelion-query-spaces/126221 "2018-03-30T11:13:31Z")\ **Posts on this page:** 1\ **Showing post:** 3
**Author:** ![ConorTier](https://avatars.discourse-cdn.com/v4/letter/c/6de8d8/32.png) [@ConorTier](https://discuss.elastic.co/u/ConorTier)\ **Post date:** [April 3, 2018, 7:41am UTC](https://discuss.elastic.co/t/timelion-query-spaces/126221/3 "2018-04-03T07:41:33Z")
As per > [@Timelion query](https://discuss.elastic.co/t/timelion-query/107050/2): > > Try using either quotes, or if you have a non-analyzed field with the same data, you can point to that. Elasticsearch might have created one for you automatically depending on how you set up your mappings, and what version you are using - you can check this out in the Index patterns page of management: the .keyword one above is the one that won't strip out special characters. So here are a few examples: The query as you wrote it, returns too many matches: Adding quotes r… Looks like you need q='message:"something happened"' single quotes with inner quotes --- _[View the full topic](https://discuss.elastic.co/t/timelion-query-spaces/126221)._