# Elasticsearch query time range issue **URL:** \ **Category:** Elasticsearch\ **Created:** [March 29, 2021, 3:19pm UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672 "2021-03-29T15:19:07Z")\ **Posts on this page:** 20\ **Page:** 2
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [March 31, 2021, 11:46am UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/21 "2021-03-31T11:46:52Z")
But could you share the output of ``` GET / ``` ? AND **PLEASE** FORMAT YOUR CODE ACCORDINGLY TO THE GUIDELINES OF THIS FORUM. > Instead, paste the text and format it with `` icon or pairs of triple backticks (```), and check the preview window to make sure it's properly formatted **before posting it**. ---
**Author:** ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Post date:** [March 31, 2021, 12:27pm UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/22 "2021-03-31T12:27:12Z")
Hi Dadoonet, As per reference doc used below curl -X POST "ip:port/my-index-000001/\_pit?keep\_alive=1m&pretty" **Output** {"error":{"root\_cause":[{"type":"parse\_exception","reason":"request body is required"}],"type":"parse\_exception","reason":"request body is required"},"status":400} **Also tried GET** curl -X GET "ip:port/my-index-000001/\_pit?keep\_alive=1m&pretty" **Output** {"error":"Incorrect HTTP method for uri [/my-index-000001/\_pit] and method [GET], allowed: [POST]","status":405} So, if I use search\_after, will I get memory consumption. Can you please provide RAW formatted csv download API, (discussed above in same thread ) if possible, then it would be easy to automate the whole process. I can close this is issue as early as if everything goes fine. ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [March 31, 2021, 2:55pm UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/23 "2021-03-31T14:55:51Z")
Is there any reason you don't want to answer the questions I'm asking? It's hard to help you if you are not answering. > [@suresh123](#): > > Can you please provide RAW formatted csv download API, (discussed above in same thread ) if possible, then it would be easy to automate the whole process. Have a look at [Response Data Formats | Elasticsearch Guide [8.11] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/sql-rest-format.html) But also look at: [Paginating through a large response | Elasticsearch Guide [8.11] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/sql-pagination.html) ---
**Author:** ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Post date:** [March 31, 2021, 3:05pm UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/24 "2021-03-31T15:05:20Z")
Hi Dadonet, I was formatting before posting every time but I am not sure where it wrong. If I get PIT ID, then I am sure, will get the results, something I need to do read privileges security at index level **Below I got from one article -\> [Point in Time should handle security on aliases · Issue #61547 · elastic/elasticsearch · GitHub](https://github.com/elastic/elasticsearch/issues/61547)** we introduced a new feature called PIT that allows to reuse the same context on multiple queries. We've decided to merge the feature in advance but there is still one thing that we need to fix/decide. The PIT relies on the concrete index names that were resolved when the PIT was created. That allows to keep the scope of a PIT to only indices that existed when the PIT was created but that makes the security on aliases more challenging. Today we allow aliases to have different permissions than their targeted indices. Even though this feature is deprecated in security at the moment, it is unclear if we'll remove it in the future. So for PIT, we've decided to disallow the creation if an alias with a different permission is used in the creation request. This issue is a placeholder to ensure that we implement this protection before `7.10` . That should be temporary until the [@elastic/es-security](https://github.com/orgs/elastic/teams/es-security) team revises the plan to un-deprecate or to remove this problematic use case definitely. If the decision is to un-deprecate we'll of course need to support the use case in PIT but that decision can wait after `7.10` is released. ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [March 31, 2021, 3:18pm UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/25 "2021-03-31T15:18:57Z")
Ok. Last time I'm asking the question. What is the output of the following command: ```auto GET / ``` Which you can translate to: ```auto curl -XGET "ip:port/" ``` ---
**Author:** ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Post date:** [March 31, 2021, 3:25pm UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/26 "2021-03-31T15:25:54Z")
Sorry, I really missed it. ``` curl -XGET "http://ip:port/" ``` **Output** ``` { "name" : "172.x.x.x", "cluster_name" : "es-cluster", "cluster_uuid" : "ssfbdfmdfdmfdfnmd", "version" : { "number" : "7.9.0", "build_flavor" : "default", "build_type" : "rpm", "build_hash" : "a479a2a7fce0389512d6a9361301708b92dff667", "build_date" : "2020-08-11T21:36:48.204330Z", "build_snapshot" : false, "lucene_version" : "8.6.0", "minimum_wire_compatibility_version" : "6.8.0", "minimum_index_compatibility_version" : "6.0.0-beta1" }, "tagline" : "You Know, for Search" } ``` ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [March 31, 2021, 3:45pm UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/27 "2021-03-31T15:45:14Z")
I edited your post so you can see the difference. From ![Capture d’écran 2021-03-31 à 17.42.34](https://us1.discourse-cdn.com/elastic/original/3X/6/f/6f3851e2221a560d06ffe97c3b28ddcb3c129327.png) To ![Capture d’écran 2021-03-31 à 17.42.52](https://us1.discourse-cdn.com/elastic/original/3X/2/0/20a1b78b97971fe68c3e9e4a8343f120e75a61de.png) So please next time, do not ident the "normal" text. Back to your question: ``` "number" : "7.9.0", ``` Point In Time API has been introduced in 7.10. So you need to upgrade. 7.12.0 is now available. ---
**Author:** ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Post date:** [March 31, 2021, 5:11pm UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/28 "2021-03-31T17:11:36Z")
`Thank you so much, will try to upgrade to latest version` ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [March 31, 2021, 9:11pm UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/29 "2021-03-31T21:11:59Z")
Do not indent your text. ---
**Author:** ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Post date:** [April 5, 2021, 7:10am UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/30 "2021-04-05T07:10:17Z")
```` ``` Hi David, I have upgraded Elastic Search version to 7.12.0. Now I am able to generate PIT ID, but getting below error. curl -X GET "http://ip:port/_search?pretty" -H 'Content-Type: application/json' -d' { "size": 10000, "query": { "match" : { "message" : "exception" } }, "pit": { "id": "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", "keep_alive": "5m" }, "sort": [ {"@timestamp": "asc"} ] } ' **Output** { "error" : { "root_cause" : [ { "type" : "search_context_missing_exception", "reason" : "No search context found for id [51609]" }, { "type" : "search_context_missing_exception", "reason" : "No search context found for id [35369]" }, { "type" : "search_context_missing_exception", "reason" : "No search context found for id [51610]" }, { "type" : "search_context_missing_exception", "reason" : "No search context found for id [235177]" }, { "type" : "search_context_missing_exception", "reason" : "No search context found for id [235178]" }, { "type" : "search_context_missing_exception", "reason" : "No search context found for id [235179]" }, { "type" : "search_context_missing_exception", "reason" : "No search context found for id [35370]" } ], "type" : "search_phase_execution_exception", "reason" : "all shards failed", "phase" : "query", "grouped" : true, "failed_shards" : [ { "shard" : 0, "index" : "dev-applogs-be-2021.03.30", "node" : "cP6Pb_sqRlCHuJNIKdZDDg", "reason" : { "type" : "search_context_missing_exception", "reason" : "No search context found for id [35369]" } }, { "shard" : 0, "index" : "dev-applogs-be-2021.04.01", "node" : "cP6Pb_sqRlCHuJNIKdZDDg", "reason" : { "type" : "search_context_missing_exception", "reason" : "No search context found for id [51610]" } }, { "shard" : 0, "index" : "dev-applogs-be-2021.04.02", "node" : "YcfJiziWQGmr4RiMfySqBw", "reason" : { "type" : "search_context_missing_exception", "reason" : "No search context found for id [235177]" } }, { "shard" : 0, "index" : "dev-applogs-be-2021.04.03", "node" : "YcfJiziWQGmr4RiMfySqBw", "reason" : { "type" : "search_context_missing_exception", "reason" : "No search context found for id [235178]" } }, ``` ```` ---
**Author:** ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Post date:** [April 5, 2021, 8:16am UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/31 "2021-04-05T08:16:05Z")
``` **Elastisearch logs** [2021-04-05T03:03:01,751][WARN][c.a.j.SdkMBeanRegistrySupport] [172.x.x.x] java.security.AccessControlException: access denied ("javax.management.MBeanServerPermission" "findMBeanServer") at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472) ~[?:?] at java.security.AccessController.checkPermission(AccessController.java:1036) ~[?:?] at java.lang.SecurityManager.checkPermission(SecurityManager.java:408) ~[?:?] at javax.management.MBeanServerFactory.checkPermission(MBeanServerFactory.java:413) ~[?:?] at javax.management.MBeanServerFactory.findMBeanServer(MBeanServerFactory.java:361) ~[?:?] at com.amazonaws.jmx.MBeans.getMBeanServer(MBeans.java:111) ~[aws-java-sdk-core-1.11.749.jar:?] at com.amazonaws.jmx.MBeans.registerMBean(MBeans.java:50) ~[aws-java-sdk-core-1.11.749.jar:?] ``` ---
**Author:** ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Post date:** [April 5, 2021, 8:40am UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/32 "2021-04-05T08:40:09Z")
``` I have resolved java.security.AccessControlException: access denied ("javax.management.MBeanServerPermission" "findMBeanServer") by installing discovery plugin in cluster. But getting earlier issue is "type" : "search_context_missing_exception", "reason" : "No search context found for id [36544]" ``` ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [April 5, 2021, 9:30am UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/33 "2021-04-05T09:30:54Z")
What is the full output of the [cluster stats API](https://www.elastic.co/guide/en/elasticsearch/reference/current/cluster-stats.html)? ---
**Author:** ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Post date:** [April 5, 2021, 9:55am UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/34 "2021-04-05T09:55:19Z")
```auto Output { "_nodes" : { "total" : 3, "successful" : 3, "failed" : 0 }, "cluster_name" : "es-cluster", "cluster_uuid" : "rMdbBBhVSIiMLIu34RVHKg", "timestamp" : 1617616250511, "status" : "green", "indices" : { "count" : 300, "shards" : { "total" : 600, "primaries" : 300, "replication" : 1.0, "index" : { "shards" : { "min" : 2, "max" : 2, "avg" : 2.0 }, "primaries" : { "min" : 1, "max" : 1, "avg" : 1.0 }, "replication" : { "min" : 1.0, "max" : 1.0, "avg" : 1.0 } } }, "docs" : { "count" : 710964173, "deleted" : 5661746 }, "store" : { "size" : "356.5gb", "size_in_bytes" : 382824864415, "reserved" : "0b", "reserved_in_bytes" : 0 }, "fielddata" : { "memory_size" : "0b", "memory_size_in_bytes" : 0, "evictions" : 0 }, "query_cache" : { "memory_size" : "48kb", "memory_size_in_bytes" : 49200, "total_count" : 4043, "hit_count" : 816, "miss_count" : 3227, "cache_size" : 60, "cache_count" : 60, "evictions" : 0 }, "completion" : { "size" : "0b", "size_in_bytes" : 0 }, "segments" : { "count" : 6838, "memory" : "158.7mb", "memory_in_bytes" : 166508156, "terms_memory" : "119.6mb", "terms_memory_in_bytes" : 125460912, "stored_fields_memory" : "6.2mb", "stored_fields_memory_in_bytes" : 6602528, "term_vectors_memory" : "0b", "term_vectors_memory_in_bytes" : 0, "norms_memory" : "15.3mb", "norms_memory_in_bytes" : 16059840, "points_memory" : "0b", "points_memory_in_bytes" : 0, "doc_values_memory" : "17.5mb", "doc_values_memory_in_bytes" : 18384876, "index_writer_memory" : "1.9gb", "index_writer_memory_in_bytes" : 2087335820, "version_map_memory" : "20.7mb", "version_map_memory_in_bytes" : 21710999, "fixed_bit_set" : "4.8mb", "fixed_bit_set_memory_in_bytes" : 5099520, "max_unsafe_auto_id_timestamp" : 1617612493206, "file_sizes" : { } }, "mappings" : { "field_types" : [ { "name" : "boolean", "count" : 1025, "index_count" : 278 }, { "name" : "byte", "count" : 32, "index_count" : 32 }, { "name" : "date", "count" : 941, "index_count" : 289 }, { "name" : "float", "count" : 584, "index_count" : 142 }, { "name" : "geo_point", "count" : 227, "index_count" : 35 }, { "name" : "half_float", "count" : 62, "index_count" : 17 }, { "name" : "histogram", "count" : 32, "index_count" : 32 }, { "name" : "integer", "count" : 154, "index_count" : 7 }, { "name" : "ip", "count" : 419, "index_count" : 35 }, { "name" : "keyword", "count" : 27956, "index_count" : 290 }, { "name" : "long", "count" : 5254, "index_count" : 281 }, { "name" : "nested", "count" : 25, "index_count" : 11 }, { "name" : "object", "count" : 12140, "index_count" : 287 }, { "name" : "scaled_float", "count" : 64, "index_count" : 32 }, { "name" : "text", "count" : 12364, "index_count" : 276 } ] }, "analysis" : { "char_filter_types" : [], "tokenizer_types" : [], "filter_types" : [], "analyzer_types" : [], "built_in_char_filters" : [], "built_in_tokenizers" : [], "built_in_filters" : [], "built_in_analyzers" : [] }, "versions" : [ { "version" : "7.9.0", "index_count" : 238, "primary_shard_count" : 238, "total_primary_size" : "173.7gb", "total_primary_bytes" : 186554870137 }, { "version" : "7.12.0", "index_count" : 62, "primary_shard_count" : 62, "total_primary_size" : "4.4gb", "total_primary_bytes" : 4757646956 } ] }, "nodes" : { "count" : { "total" : 3, "coordinating_only" : 0, "data" : 3, "data_cold" : 3, "data_content" : 3, "data_frozen" : 3, "data_hot" : 3, "data_warm" : 3, "ingest" : 3, "master" : 3, "ml" : 3, "remote_cluster_client" : 3, "transform" : 3, "voting_only" : 0 }, "versions" : [ "7.12.0" ], "os" : { "available_processors" : 12, "allocated_processors" : 12, "names" : [ { "name" : "Linux", "count" : 3 } ], "pretty_names" : [ { "pretty_name" : "Amazon Linux 2", "count" : 3 } ], "architectures" : [ { "arch" : "amd64", "count" : 3 } ], "mem" : { "total" : "46.4gb", "total_in_bytes" : 49873268736, "free" : "453.6mb", "free_in_bytes" : 475656192, "used" : "46gb", "used_in_bytes" : 49397612544, "free_percent" : 1, "used_percent" : 99 } }, "process" : { "cpu" : { "percent" : 10 }, "open_file_descriptors" : { "min" : 1959, "max" : 2065, "avg" : 2018 } }, "jvm" : { "max_uptime" : "1.4h", "max_uptime_in_millis" : 5269275, "versions" : [ { "version" : "15.0.1", "vm_name" : "OpenJDK 64-Bit Server VM", "vm_version" : "15.0.1+9", "vm_vendor" : "AdoptOpenJDK", "bundled_jdk" : true, "using_bundled_jdk" : true, "count" : 3 } ], "mem" : { "heap_used" : "9.8gb", "heap_used_in_bytes" : 10523690496, "heap_max" : "23.2gb", "heap_max_in_bytes" : 24939331584 }, "threads" : 213 }, "fs" : { "total" : "1.4tb", "total_in_bytes" : 1610574925824, "free" : "1tb", "free_in_bytes" : 1194139471872, "available" : "1tb", "available_in_bytes" : 1194139471872 }, "plugins" : [ { "name" : "discovery-ec2", "version" : "7.12.0", "elasticsearch_version" : "7.12.0", "java_version" : "1.8", "description" : "The EC2 discovery plugin allows to use AWS API for the unicast discovery mechanism.", "classname" : "org.elasticsearch.discovery.ec2.Ec2DiscoveryPlugin", "extended_plugins" : [], "has_native_controller" : false, "licensed" : false, "type" : "isolated" }, { "name" : "repository-s3", "version" : "7.12.0", "elasticsearch_version" : "7.12.0", "java_version" : "1.8", "description" : "The S3 repository plugin adds S3 repositories", "classname" : "org.elasticsearch.repositories.s3.S3RepositoryPlugin", "extended_plugins" : [], "has_native_controller" : false, "licensed" : false, "type" : "isolated" } ], "network_types" : { "transport_types" : { "security4" : 3 }, "http_types" : { "security4" : 3 } }, "discovery_types" : { "zen" : 3 }, "packaging_types" : [ { "flavor" : "default", "type" : "rpm", "count" : 3 } ], "ingest" : { "number_of_pipelines" : 7, "processor_stats" : { "conditional" : { "count" : 1475794, "failed" : 0, "current" : 0, "time" : "20.3s", "time_in_millis" : 20378 }, "geoip" : { "count" : 1475794, "failed" : 0, "current" : 0, "time" : "11.5s", "time_in_millis" : 11532 }, "gsub" : { "count" : 0, "failed" : 0, "current" : 0, "time" : "0s", "time_in_millis" : 0 }, "pipeline" : { "count" : 5903176, "failed" : 0, "current" : 0, "time" : "52s", "time_in_millis" : 52040 }, "script" : { "count" : 0, "failed" : 0, "current" : 0, "time" : "0s", "time_in_millis" : 0 }, "user_agent" : { "count" : 1475794, "failed" : 0, "current" : 0, "time" : "7.9s", "time_in_millis" : 7950 } } } } } ``` ---
**Author:** ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Post date:** [April 5, 2021, 10:39am UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/36 "2021-04-05T10:39:59Z")
```auto Hi Christian, I did not get it. I am trying to get more than 10,000 records using PIT ID so that I have upgraded to latest version. But getting same error. "reason" : { "type" : "search_context_missing_exception", "reason" : "No search context found for id [235178]" } ``` ---
**Author:** ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Post date:** [April 5, 2021, 11:27am UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/37 "2021-04-05T11:27:29Z")
I am not getting what is this. (post withdrawn by author, will be automatically deleted in 24 hours unless flagged) ---
**Author:** ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Post date:** [April 5, 2021, 1:02pm UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/38 "2021-04-05T13:02:03Z")
Hi David / Stephen, My requirement is changed. I will create a new thread with exact requirement. Thank you so much for supporting. Regards, Suresh ---
**Author:** ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Post date:** [April 8, 2021, 7:36am UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/39 "2021-04-08T07:36:10Z")
```auto Hi David, I am re-opening this thread as I need to get some fields using PIT. Below is the error, after adding PIT { "error" : { "root_cause" : [ { "type" : "search_context_missing_exception", "reason" : "No search context found for id [832668]" }, { "type" : "search_context_missing_exception", "reason" : "No search context found for id [150759]" }, { "shard" : 0, "index" : "dev2-applogs-be-2021.04.08", "node" : "cP6Pb_sqRlCHuJNIKdZDDg", "reason" : { "type" : "search_context_missing_exception", "reason" : "No search context found for id [150761]" } Query curl -X GET "http://ip:port_search?pretty" -H 'Content-Type: application/json' -d' { "size": 10000, "_source": ["kubernetes.container.name", "kubernetes.namespace", "message", "@timestamp"], "query": { "bool": { "must": { "match": { "message": "exception" } }, "filter": { "range": { "@timestamp": { "gte": "2021-04-06T01:00:00", "lte": "2021-04-06T18:00:00" } } } } }, "pit": { "id": "48myAwcaZGV2Mi1hcHBsb2dzLWJlLTIwMjEuMDQuMDgWY1d0MzhzSERRZnF6eGNNLVJubko0QQAWY1A2UGJfc3FSbENIdUpOSUtkWkREZwAAAAAAAAJM6RZvRHNRTkY0MlF2aWpuVWEweHpIdmN3ABpkZXYyLWFwcGxvZ3MtYmUtMjAyMS4wNC4wNRZqWlAyYXdwSVRTS1hqRUh4bGI2Uk93ABZZY2ZKaXppV1FHbXI0UmlNZnlTcUJ3AAAAAAAADLSdFm95VWZUVFQzUnBXMU5xem9IX0hNbkEAGmRldjItYXBwbG9ncy1iZS0yMDIxLjA0LjA3FmFEQWotRURYU2pHbjVBdm1mTWtSNGcAFlljZkppemlXUUdtcjRSaU1meVNxQncAAAAAAAAMtJ4Wb3lVZlRUVDNScFcxTnF6b0hfSE1uQQAaZGV2Mi1hcHBsb2dzLWJlLTIwMjEuMDQuMDIWTmNudXJCdS1UMldVQWtHcnhyR3NDZwAWWWNmSml6aVdRR21yNFJpTWZ5U3FCdwAAAAAAAAy0nBZveVVmVFRUM1JwVzFOcXpvSF9ITW5BABpkZXYyLWFwcGxvZ3MtYmUtMjAyMS4wNC4wNhZDUGRfUF9RMVJEdVMxYmpLNlViSWJBABZFamdFTTBoaFIyV0RzMF9DbkcycFFRAAAAAAAAAeJMFnVVazE1dXRWVDJDTmdKWFUtekNRMmcAGmRldjItYXBwbG9ncy1iZS0yMDIxLjA0LjA0FkRNUUpHd1l3VHlLbjVJM0JOSlZRSGcAFmNQNlBiX3NxUmxDSHVKTklLZFpERGcAAAAAAAACTOgWb0RzUU5GNDJRdmlqblVhMHh6SHZjdwAaZGV2Mi1hcHBsb2dzLWJlLTIwMjEuMDQuMDMWZlhWT2FjR3hRRktFSDlhekNZNlBZQQAWY1A2UGJfc3FSbENIdUpOSUtkWkREZwAAAAAAAAJM5xZvRHNRTkY0MlF2aWpuVWEweHpIdmN3AAcWRE1RSkd3WXdUeUtuNUkzQk5KVlFIZwAAFmNXdDM4c0hEUWZxenhjTS1Sbm5KNEEAABZmWFZPYWNHeFFGS0VIOWF6Q1k2UFlBAAAWQ1BkX1BfUTFSRHVTMWJqSzZVYkliQQAAFmFEQWotRURYU2pHbjVBdm1mTWtSNGcAABZqWlAyYXdwSVRTS1hqRUh4bGI2Uk93AAAWTmNudXJCdS1UMldVQWtHcnhyR3NDZwAA", "keep_alive": "1m" }, "sort": [ {"@timestamp": "asc"} ] } ' ``` ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [April 8, 2021, 8:06am UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/40 "2021-04-08T08:06:52Z")
Stop formatting as code the text part. Please format only the code part. Is there anything you don't understand in this sentence that I need to clarify? ---
**Author:** ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Post date:** [April 8, 2021, 8:23am UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672/41 "2021-04-08T08:23:05Z")
```auto curl -X GET "http://ip:port_search?pretty" -H 'Content-Type: application/json' -d' { "size": 10000, "_source": ["kubernetes.container.name", "kubernetes.namespace", "message", "@timestamp"], "query": { "bool": { "must": { "match": { "message": "exception" } }, "filter": { "range": { "@timestamp": { "gte": "2021-04-06T01:00:00", "lte": "2021-04-06T18:00:00" } } } } }, "pit": { "id": "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", "keep_alive": "1m" }, "sort": [ {"@timestamp": "asc"} ] } ' ``` [Previous page](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672.md?page=1) [Next page](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672.md?page=3)