# Timelion - syntax for multiple AND

**URL:** <https://discuss.elastic.co/t/timelion-syntax-for-multiple-and/166957>\
**Category:** Kibana\
**Tags:** timelion\
**Created:** [February 4, 2019, 12:38pm UTC](https://discuss.elastic.co/t/timelion-syntax-for-multiple-and/166957 "2019-02-04T12:38:08Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mariner191](https://avatars.discourse-cdn.com/v4/letter/m/96bed5/32.png) [@Mariner191](https://discuss.elastic.co/u/Mariner191)\
**Post date:** [February 4, 2019, 12:38pm UTC](https://discuss.elastic.co/t/timelion-syntax-for-multiple-and/166957/1 "2019-02-04T12:38:08Z")

</div>

Hi, How to correctly syntax for multiple AND?Elastic\_Forum\_Image\_SyntaxforMultipleAND|690x388

Thank you

---

<div class="post-metadata">

**Author:** ![nickpeihl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nickpeihl/32/112622_2.png) [@nickpeihl](https://discuss.elastic.co/u/nickpeihl)\
**Post date:** [February 4, 2019, 10:16pm UTC](https://discuss.elastic.co/t/timelion-syntax-for-multiple-and/166957/2 "2019-02-04T22:16:22Z")

</div>

This is covered by the Timelion tutorial which you can access by clicking "Help" within Timelion.

`.es('user:bob AND bytes:>100')`

---

<div class="post-metadata">

**Author:** ![Mariner191](https://avatars.discourse-cdn.com/v4/letter/m/96bed5/32.png) [@Mariner191](https://discuss.elastic.co/u/Mariner191)\
**Post date:** [February 5, 2019, 12:49pm UTC](https://discuss.elastic.co/t/timelion-syntax-for-multiple-and/166957/3 "2019-02-05T12:49:10Z")

</div>

Nick, when attempting multiple AND within (' '), Timelion runs, but data goes to zero (flat line). Remove either one of the AND criterion, line is OK. Need to run on full criterion.  
A

 ![Elastic_Forum_Image2_SyntaxforMultipleAND](https://us1.discourse-cdn.com/elastic/original/3X/a/5/a5b10ecaa2d6723999ed8668f9598190bee9ac5f.jpeg) any ideas appreciated.

---

<div class="post-metadata">

**Author:** ![nickpeihl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nickpeihl/32/112622_2.png) [@nickpeihl](https://discuss.elastic.co/u/nickpeihl)\
**Post date:** [February 5, 2019, 10:46pm UTC](https://discuss.elastic.co/t/timelion-syntax-for-multiple-and/166957/4 "2019-02-05T22:46:43Z")

</div>

Sorry, it's hard for me to understand the issue without more information. Can you share some example documents?

---

<div class="post-metadata">

**Author:** ![Mariner191](https://avatars.discourse-cdn.com/v4/letter/m/96bed5/32.png) [@Mariner191](https://discuss.elastic.co/u/Mariner191)\
**Post date:** [February 6, 2019, 12:42pm UTC](https://discuss.elastic.co/t/timelion-syntax-for-multiple-and/166957/5 "2019-02-06T12:42:23Z")

</div>

Syntax for the second AND has been resolved. As the Lucene code runs, yet Y-axis indicates zero. Table Visualization indicates is a data issue. Demonstrated by adding Bucket for the second AND criterion, Table “No results found”.

 ![Elastic_Forum_Image2a_SyntaxforMultipleAND](https://us1.discourse-cdn.com/elastic/original/3X/a/a/aa3fbe2e5fd6e2913c81500a896396c679e711c1.jpeg)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 6, 2019, 12:42pm UTC](https://discuss.elastic.co/t/timelion-syntax-for-multiple-and/166957/6 "2019-03-06T12:42:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.