# Using Timelion with alphanumeric field names **URL:** \ **Category:** Kibana\ **Tags:** timelion\ **Created:** [January 4, 2018, 4:02pm UTC](https://discuss.elastic.co/t/using-timelion-with-alphanumeric-field-names/114124 "2018-01-04T16:02:32Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![ccullen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ccullen/32/25590_2.png) [@ccullen](https://discuss.elastic.co/u/ccullen)\ **Post date:** [January 4, 2018, 4:02pm UTC](https://discuss.elastic.co/t/using-timelion-with-alphanumeric-field-names/114124/1 "2018-01-04T16:02:32Z")
Lately I've been stuffing mail-related logs into ES, and among those are some performance statistics produced by AMaViS -- particularly, data related to how long each step of the virus checking takes. I use inline Ruby to munge the message into a bunch of key-value pairs under the general heading 'timing', so I end up with `[timing][parse]` and `[timing][extract_message_metadata]` etc. and also some like `[timing][tests_pri__1000]` (because my Ruby `tr`'s `"- ."` into `"_"`; it appears in the source log message as `tests_pri_-1000`) ... Now of course, in Timelion, the query looks like: ```auto .es(index=logstash-*, q=action:timing, metric=avg:timing.parse) ``` The above works just fine. There are 20-odd datapoints, and all the ones which are only letters and underscores work fine. But when I try to graph the data under `timing.tests_pri__1000` it silently fails to gather any data for that particular query. All the others continue to work, but I would also like to be able to graph the data held in the alphanumerically named fields. Currently, I am at the point of remapping `[0-9]` onto some arbitrary set of letters, `{'0' => 'O', '1' => 'I', ...}` etc, but I thought I should raise this issue and ask whether I'm simply doing something wrong, or do I need to escape my numbers, or is this a known shortcoming of Timelion? ---
**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Post date:** [January 4, 2018, 4:24pm UTC](https://discuss.elastic.co/t/using-timelion-with-alphanumeric-field-names/114124/2 "2018-01-04T16:24:39Z")
Sorry , I have not got much idea on this...@timroes - any idea? ---
**Author:** ![timroes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timroes/32/19712_2.png) [@timroes](https://discuss.elastic.co/u/timroes)\ **Post date:** [January 8, 2018, 7:52am UTC](https://discuss.elastic.co/t/using-timelion-with-alphanumeric-field-names/114124/3 "2018-01-08T07:52:31Z")
Hey Caleb, could you elaborate a bit more on _"when I try to graph the data under timing.tests\_pri\_\_1000"_? What does your timelion expression for that looks like? Is the field used in the query (`q`) parameter or in the `metric`? One suggestion would be: could you try putting that whole parameter into quotes (e.g. like `q="action:timing"`) and check if that solves the issue? Cheers, Tim ---
**Author:** ![ccullen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ccullen/32/25590_2.png) [@ccullen](https://discuss.elastic.co/u/ccullen)\ **Post date:** [January 8, 2018, 5:07pm UTC](https://discuss.elastic.co/t/using-timelion-with-alphanumeric-field-names/114124/4 "2018-01-08T17:07:50Z")
Sometimes, when I work with these tools, I feel like I'm losing my mind. I was using a very simple scenario previously when I tried an expression like: ```auto .es(index=logstash-*, q=action:timing, metric=avg:timing.tests_pri__1000) ``` and got seemingly no result. But once again, re-testing it now, I find that in fact, that expression works fine. It obtains data from the field name which contains numbers, and it graphs that data. Last week, it seemed as though it silently ignored field names which contained numbers. It is possible that I simply had other data in the same chart with values up to two orders of magnitude greater in value, which caused the graph to be a flat line. Thanks for your response to my concern, and for your patience. ---
**Author:** ![timroes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timroes/32/19712_2.png) [@timroes](https://discuss.elastic.co/u/timroes)\ **Post date:** [January 8, 2018, 5:22pm UTC](https://discuss.elastic.co/t/using-timelion-with-alphanumeric-field-names/114124/5 "2018-01-08T17:22:42Z")
Hi Caleb, glad it works now for you. A small tip (for the case you are not aware of anyway already): If you want to preclude, that you have values on a complete different scale and thus not seeing the line, add a `.yaxis(2)` to the expression you are testing. It will place it on the 2nd yaxis and thus make it independent of the data range of the first yaxis. (Any other number works of course, too.) Cheers, Tim ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 5, 2018, 5:23pm UTC](https://discuss.elastic.co/t/using-timelion-with-alphanumeric-field-names/114124/6 "2018-02-05T17:23:05Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.