# Aggregation in Kibana or Elasticsearch **URL:** \ **Category:** Elasticsearch\ **Created:** [April 24, 2014, 1:19am UTC](https://discuss.elastic.co/t/aggregation-in-kibana-or-elasticsearch/17160 "2014-04-24T01:19:42Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Praveen\_Shilavantar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/praveen_shilavantar/32/1619_2.png) [@Praveen\_Shilavantar](https://discuss.elastic.co/u/Praveen_Shilavantar)\ **Post date:** [April 24, 2014, 1:19am UTC](https://discuss.elastic.co/t/aggregation-in-kibana-or-elasticsearch/17160/1 "2014-04-24T01:19:42Z")
Hi, I am new to elasticsearch and kibana. I have loaded some log data into elasticsearch and I have a field called "LogDetail" and the content looks like below _Antenna plate 1 temperature: 40.00 degC_ I would like to get the log events/documents for temperature \> 70.00 degC. This is how we are doing in MySQL. SELECT substring(log\_detail, 30, 5) AS temp FROM log\_table WHERE log\_detail like 'temperature: %' HAVING temp \> 70.00 Is this something we can do with elastisearch query or the data needs to be parsed to get the temperature value out of it while loading the data? Thanks -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/6fc53bd1-a088-4ed6-a83d-1c00931f023c%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/6fc53bd1-a088-4ed6-a83d-1c00931f023c%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Praveen\_Shilavantar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/praveen_shilavantar/32/1619_2.png) [@Praveen\_Shilavantar](https://discuss.elastic.co/u/Praveen_Shilavantar)\ **Post date:** [April 24, 2014, 6:28am UTC](https://discuss.elastic.co/t/aggregation-in-kibana-or-elasticsearch/17160/2 "2014-04-24T06:28:29Z")
The below query worked for me. LogDate:[2013-08-01 TO 2013-08-10] AND (LogDetail:"Antenna plate 1 temperature:\*" AND LogDetail:[70.00 TO 80.00]) On Wed, Apr 23, 2014 at 6:19 PM, Praveen Shilavantar [prazzee@gmail.com](mailto:prazzee@gmail.com)wrote: > Hi, > > I am new to elasticsearch and kibana. I have loaded some log data into > elasticsearch and I have a field called "LogDetail" and the content looks > like below > > _Antenna plate 1 temperature: 40.00 degC_ > > I would like to get the log events/documents for temperature \> 70.00 degC. > This is how we are doing in MySQL. > > SELECT substring(log\_detail, 30, 5) AS temp > FROM log\_table > WHERE log\_detail like 'temperature: %' > HAVING temp \> 70.00 > > Is this something we can do with elastisearch query or the data needs to > be parsed to get the temperature value out of it while loading the data? > > Thanks > > -- > You received this message because you are subscribed to a topic in the > Google Groups "elasticsearch" group. > To unsubscribe from this topic, visit > [https://groups.google.com/d/topic/elasticsearch/v2L149ADZWk/unsubscribe](https://groups.google.com/d/topic/elasticsearch/v2L149ADZWk/unsubscribe). > To unsubscribe from this group and all its topics, send an email to > [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/6fc53bd1-a088-4ed6-a83d-1c00931f023c%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/6fc53bd1-a088-4ed6-a83d-1c00931f023c%40googlegroups.com)[https://groups.google.com/d/msgid/elasticsearch/6fc53bd1-a088-4ed6-a83d-1c00931f023c%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/6fc53bd1-a088-4ed6-a83d-1c00931f023c%40googlegroups.com?utm_medium=email&utm_source=footer) > . > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAN5oP9VmJ339GS8-gAxuYpcV3TRyMuPKDYPv8AsJEZoKm2z7zQ%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAN5oP9VmJ339GS8-gAxuYpcV3TRyMuPKDYPv8AsJEZoKm2z7zQ%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:33am UTC](https://discuss.elastic.co/t/aggregation-in-kibana-or-elasticsearch/17160/3 "2017-07-06T01:33:52Z")