How to compare value in elasticsearch

Hello everyone!

I am having some problems in filtering metrics in elasticsearch.
For example: beside a Total field, I want to filter value in fail column.

function:Total AND fail>0

In the above example: fail>0 is wrong. How can I fixt it? Thanks !


Quang Vũ Blog
Địa chỉ: 432 Nguyễn Thị Minh Khai, Phường 5, Quận 3, Hồ Chí Minh
Phone: +84 977 689 733
Email: quangvublog@gmail.com
Website: https://blog.vu-review.com

Try:

function:Total AND fail:[0 TO ]

might work.

Thank you so much! I have tried it and I get this reponse "2 of 4 shards failed"

Probably because one of the mapping is not correct but I can't really tell with so few information.

This is a snapshot of kibana, you can see it easily

I don't see anything wrong as you described previously. So unless you give all details I'm afraid I cannot help.

Can you retrieve and show the mappings for the indices matching the index pattern?