Tags:
create new tag
view all tags
To change the date requirement use echo $((`date +%s` - 86400)) Note that the query requires JSON time (multiply unix time by 1000)

{
  "size": 50000,
  "sort": {
    "@timestamp": "desc"
  },
  "query": {
    "filtered": {
      "query": {
        "query_string": {
          "query": "uvic",
          "analyze_wildcard": true
        }
      },
      "filter": {
        "bool": {
          "must": [
            {
              "range": {
                "@timestamp": {
                  "gte": 1463640579758
                }
              }
            }
          ],
          "must_not": []
        }
      }
    }
  }
}
Edit | Attach | Watch | Print version | History: r3 < r2 < r1 | Backlinks | Raw View | More topic actions
Topic revision: r3 - 2016-07-19 - rsobie
 
This site is powered by the TWiki collaboration platform Powered by PerlCopyright © 2008-2019 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback