# Dev tools vs filter query. Two different totals

**URL:** <https://discuss.elastic.co/t/dev-tools-vs-filter-query-two-different-totals/145611>\
**Category:** Elasticsearch\
**Created:** [August 22, 2018, 8:36pm UTC](https://discuss.elastic.co/t/dev-tools-vs-filter-query-two-different-totals/145611 "2018-08-22T20:36:37Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![chapmantrain](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chapmantrain/32/22646_2.png) [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Post date:** [August 22, 2018, 8:36pm UTC](https://discuss.elastic.co/t/dev-tools-vs-filter-query-two-different-totals/145611/1 "2018-08-22T20:36:37Z")

</div>

This is the query in question.

```
{
"query": {
	"bool": {
		"filter": {
			"range": {
				"@timestamp": {
					"gte": "now-12h"
				}
			}
		},
		"must": [{
			"match": {
				"type.keyword": "camunda.log"
			}
		},
		{
			"match": {
				"message": "com.arjuna.ats.arjuna"
			}
		}]
	}
}

```

}

When I run this in dev tools I get:

{  
"took": 54,  
"timed\_out": false,  
"\_shards": {  
"total": 405,  
"successful": 405,  
"failed": 0  
},  
"hits": {  
"total": 4421,  
"max\_score": 10.361226,  
"hits": [  
{  
"\_index": "camunda-prod-2018.08.22",  
"\_type": "camunda.log",  
"\_id": "AWVi7\_XDJWzZ\_kaZnjBs",  
"\_score": 10.361226,

Which is not right. When I run this as a filter query in Discover, I get: 133 hits.

That is correct. Why am I getting two different answers with the same query. I am setting this up as a watch. In the watch I get the 4421 hits also. Am I over looking something?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 19, 2018, 8:36pm UTC](https://discuss.elastic.co/t/dev-tools-vs-filter-query-two-different-totals/145611/2 "2018-09-19T20:36:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.