# How to compare value in elasticsearch

**URL:** <https://discuss.elastic.co/t/how-to-compare-value-in-elasticsearch/190379>\
**Category:** Elasticsearch\
**Created:** [July 14, 2019, 10:24am UTC](https://discuss.elastic.co/t/how-to-compare-value-in-elasticsearch/190379 "2019-07-14T10:24:27Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![quangvublog](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/quangvublog/32/47594_2.png) [@quangvublog](https://discuss.elastic.co/u/quangvublog)\
**Post date:** [July 14, 2019, 10:24am UTC](https://discuss.elastic.co/t/how-to-compare-value-in-elasticsearch/190379/1 "2019-07-14T10:24:27Z")

</div>

Hello everyone!

I am having some problems in filtering metrics in elasticsearch.  
For example: beside a Total field, I want to filter value in fail column.

```
function:Total AND fail>0

```

In the above example: fail\>0 is wrong. How can I fixt it? Thanks !

* * *

Quang Vũ Blog  
Địa chỉ: 432 Nguyễn Thị Minh Khai, Phường 5, Quận 3, Hồ Chí Minh  
Phone: +84 977 689 733  
Email: [quangvublog@gmail.com](mailto:quangvublog@gmail.com)  
Website: [https://blog.vu-review.com](https://blog.vu-review.com)

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [July 14, 2019, 12:55pm UTC](https://discuss.elastic.co/t/how-to-compare-value-in-elasticsearch/190379/2 "2019-07-14T12:55:19Z")

</div>

Try:

```
function:Total AND fail:[0 TO]

```

might work.

---

<div class="post-metadata">

**Author:** ![quangvublog](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/quangvublog/32/47594_2.png) [@quangvublog](https://discuss.elastic.co/u/quangvublog)\
**Post date:** [July 14, 2019, 3:36pm UTC](https://discuss.elastic.co/t/how-to-compare-value-in-elasticsearch/190379/3 "2019-07-14T15:36:16Z")

</div>

Thank you so much! I have tried it and I get this reponse "2 of 4 shards failed"

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [July 14, 2019, 4:24pm UTC](https://discuss.elastic.co/t/how-to-compare-value-in-elasticsearch/190379/4 "2019-07-14T16:24:40Z")

</div>

Probably because one of the mapping is not correct but I can't really tell with so few information.

---

<div class="post-metadata">

**Author:** ![quangvublog](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/quangvublog/32/47594_2.png) [@quangvublog](https://discuss.elastic.co/u/quangvublog)\
**Post date:** [July 14, 2019, 4:43pm UTC](https://discuss.elastic.co/t/how-to-compare-value-in-elasticsearch/190379/5 "2019-07-14T16:43:45Z")

</div>

This is a snapshot of kibana, you can see it easily

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/2/52c0678f1d1e99b099e95d7d4f87dac463c23b78.png)

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [July 14, 2019, 5:01pm UTC](https://discuss.elastic.co/t/how-to-compare-value-in-elasticsearch/190379/6 "2019-07-14T17:01:15Z")

</div>

I don't see anything wrong as you described previously. So unless you give all details I'm afraid I cannot help.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [July 14, 2019, 5:11pm UTC](https://discuss.elastic.co/t/how-to-compare-value-in-elasticsearch/190379/7 "2019-07-14T17:11:13Z")

</div>

Can you retrieve and show the mappings for the indices matching the index pattern?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 11, 2019, 5:16pm UTC](https://discuss.elastic.co/t/how-to-compare-value-in-elasticsearch/190379/8 "2019-08-11T17:16:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.