# Using urlparam in an Elasticsearch SQL query in Kibana Canvas

**URL:** <https://discuss.elastic.co/t/using-urlparam-in-an-elasticsearch-sql-query-in-kibana-canvas/204816>\
**Category:** Kibana\
**Tags:** canvas\
**Created:** [October 23, 2019, 8:01am UTC](https://discuss.elastic.co/t/using-urlparam-in-an-elasticsearch-sql-query-in-kibana-canvas/204816 "2019-10-23T08:01:01Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sahiru\_Gunawardene](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sahiru_gunawardene/32/56389_2.png) [@Sahiru\_Gunawardene](https://discuss.elastic.co/u/Sahiru_Gunawardene)\
**Post date:** [October 23, 2019, 8:01am UTC](https://discuss.elastic.co/t/using-urlparam-in-an-elasticsearch-sql-query-in-kibana-canvas/204816/1 "2019-10-23T08:01:01Z")

</div>

How would I use the value received from a urlparam in an Elasticsearch SQL query?

For example:  
I need to use the urlparam in an Elasticsearch SQL query which is used to retrieve data used to populate a datatable so I would like something like this:  
`filters`  
`| essql`  
`query="SELECT project, release, sum(effort) FROM my_index where field= "{urlparam param=varFromURL default=1000} " group by field1, field2"`  
`| table`  
`| render`

Apologies for the slightly messy question. Sort of in a rush. Thanks

---

<div class="post-metadata">

**Author:** ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)\
**Post date:** [October 23, 2019, 12:29pm UTC](https://discuss.elastic.co/t/using-urlparam-in-an-elasticsearch-sql-query-in-kibana-canvas/204816/2 "2019-10-23T12:29:55Z")

</div>

Hey @Sahiru_Gunawardene, welcome to the discussion boards!

Give this syntax a try. I do want to caution you though -- this is **widely considered unsafe** , as you are taking data from the URL (which the user controls) and injecting it into a SQL query:

```auto
filters
| essql
query={string "SELECT project, release, sum(effort) FROM my_index where field= '" {urlparam param=varFromURL default=1000} "' group by field1, field2"
| table
| render

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 20, 2019, 12:29pm UTC](https://discuss.elastic.co/t/using-urlparam-in-an-elasticsearch-sql-query-in-kibana-canvas/204816/3 "2019-11-20T12:29:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.