(Version: 6.4.2)
I have 2 filters that work well : 1. Matches to the phrase "NA"
{
"query": {
"match": {
"region.keyword": {
"query": "NA",
"type": "phrase"
}
}
}
}
2.Uses a scripted field that pulls filters to show all hours not between 0-7:
{
"script": {
"script": {
"inline": "boolean gte(Supplier s, def v) {return s.get() >= v} boolean lt(Supplier s, def v) {return s.get() < v}gte(() -> { doc['@timestamp'].date.hourOfDay }, params.gte) && lt(() -> { doc['@timestamp'].date.hourOfDay }, params.lt)",
"params": {
"gte": 0,
"lt": 7,
"value": ">=0 <7"
},
"lang": "painless"
}
}
}
I would like to group this into one filter so its "NA hours not between 0-7" this way I can change the region and the times and still apply additional filters.
Also not sure how to add this kind of custom filter as adding a filter only allows me to choose 1