# Create request for last 15 min

**URL:** <https://discuss.elastic.co/t/create-request-for-last-15-min/2650>\
**Category:** Elasticsearch\
**Created:** [June 14, 2015, 8:02pm UTC](https://discuss.elastic.co/t/create-request-for-last-15-min/2650 "2015-06-14T20:02:30Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Smasell](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/smasell/32/43483_2.png) [@Smasell](https://discuss.elastic.co/u/Smasell)\
**Post date:** [June 14, 2015, 8:02pm UTC](https://discuss.elastic.co/t/create-request-for-last-15-min/2650/1 "2015-06-14T20:02:30Z")

</div>

Hi community!!!  
I want to create a request that transmits me all the documents for last 15min.  
Any advice will be highly appreciated!!!

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 14, 2015, 11:15pm UTC](https://discuss.elastic.co/t/create-request-for-last-15-min/2650/2 "2015-06-14T23:15:13Z")

</div>

The easiest way would be to do a [date range query](https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-range-query.html#_date_options).

---

<div class="post-metadata">

**Author:** ![Smasell](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/smasell/32/43483_2.png) [@Smasell](https://discuss.elastic.co/u/Smasell)\
**Post date:** [June 15, 2015, 10:06am UTC](https://discuss.elastic.co/t/create-request-for-last-15-min/2650/3 "2015-06-15T10:06:07Z")

</div>

@warkolm  
Thanks, but how can i ask elasticsearch to do this.  
I have my documents like this:  
curl -XPUT localhost:9200/indexname/documentname/4 -d'  
{

> user: "sergey",  
> onlineUserCount: "43"  
> }'  
> i want to display all the documents that comes to elasticsearch for the last 15 minutes.

---

<div class="post-metadata">

**Author:** ![Smasell](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/smasell/32/43483_2.png) [@Smasell](https://discuss.elastic.co/u/Smasell)\
**Post date:** [June 15, 2015, 11:39am UTC](https://discuss.elastic.co/t/create-request-for-last-15-min/2650/4 "2015-06-15T11:39:53Z")

</div>

I've searched like this  
$ curl -XGET localhost:9200/indexname/documentname/\_query -d'{

> "query":{  
> "range":{  
> "timestamp":{  
> "gt": "now -15m"  
> }}}}'

But It gaves me nothing!!!

---

<div class="post-metadata">

**Author:** ![dantuff](https://avatars.discourse-cdn.com/v4/letter/d/e79b87/32.png) [@dantuff](https://discuss.elastic.co/u/dantuff)\
**Post date:** [June 15, 2015, 12:25pm UTC](https://discuss.elastic.co/t/create-request-for-last-15-min/2650/5 "2015-06-15T12:25:53Z")

</div>

You need to use the `_search` endpoint in your request, not the `_query` endpoint.

---

<div class="post-metadata">

**Author:** ![Smasell](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/smasell/32/43483_2.png) [@Smasell](https://discuss.elastic.co/u/Smasell)\
**Post date:** [June 15, 2015, 12:43pm UTC](https://discuss.elastic.co/t/create-request-for-last-15-min/2650/6 "2015-06-15T12:43:26Z")

</div>

@dantuff  
Thx for reply. Is it possible to get what i want without timestamp?

---

<div class="post-metadata">

**Author:** ![Smasell](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/smasell/32/43483_2.png) [@Smasell](https://discuss.elastic.co/u/Smasell)\
**Post date:** [June 15, 2015, 12:45pm UTC](https://discuss.elastic.co/t/create-request-for-last-15-min/2650/7 "2015-06-15T12:45:41Z")

</div>

Or i have to enabled timestamp if i want to request all documents for last 15 minutes?

---

<div class="post-metadata">

**Author:** ![dantuff](https://avatars.discourse-cdn.com/v4/letter/d/e79b87/32.png) [@dantuff](https://discuss.elastic.co/u/dantuff)\
**Post date:** [June 15, 2015, 1:07pm UTC](https://discuss.elastic.co/t/create-request-for-last-15-min/2650/8 "2015-06-15T13:07:18Z")

</div>

Yes, take a look here:

[https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping-timestamp-field.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping-timestamp-field.html)

---

<div class="post-metadata">

**Author:** ![Smasell](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/smasell/32/43483_2.png) [@Smasell](https://discuss.elastic.co/u/Smasell)\
**Post date:** [June 15, 2015, 3:22pm UTC](https://discuss.elastic.co/t/create-request-for-last-15-min/2650/9 "2015-06-15T15:22:36Z")

</div>

I can't understand, Is elasticsearch create date field automatically or not? If it does how can i add the range without timestamp?

---

<div class="post-metadata">

**Author:** ![dantuff](https://avatars.discourse-cdn.com/v4/letter/d/e79b87/32.png) [@dantuff](https://discuss.elastic.co/u/dantuff)\
**Post date:** [June 15, 2015, 3:34pm UTC](https://discuss.elastic.co/t/create-request-for-last-15-min/2650/10 "2015-06-15T15:34:09Z")

</div>

If you enable the `_timestamp` it will create the field. Here's a simple example. Create your index with `_timestamp` enabled.

```
POST /demo
{
	"mappings": {
		"_default_": {
			"_timestamp": {
				"enabled": true
			}
		}
	}
}

```

Index a document:

```
POST /demo/doc/1
{
    "name": "test"
} 

```

Now execute the range query and the document is returned

```
POST /demo/_search
{
	"query": {
		"range": {
			"_timestamp": {
				"gt": "now-15m"
			}
		}
	}
}
```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 12:07am UTC](https://discuss.elastic.co/t/create-request-for-last-15-min/2650/11 "2017-07-06T00:07:25Z")

</div>