How to query empty values of number type and date type fields

Elastic Stack Elasticsearch
1

Hi all.....
we have a index having number type field which holds some empty values as well
but when we try to filter empty(null) event from kibana discovery we are getting error

Discover: [parsing_exception] [match] unknown token [VALUE_NULL] after [query], with { line=1 & col=177 }
Error: [parsing_exception] [match] unknown token [VALUE_NULL] after [query], with { line=1 & col=177 }
   at respond (http://192.168.1.62:5601/bundles/kibana.bundle.js?v=15063:12:2730)
   at checkRespForFailure (http://192.168.1.62:5601/bundles/kibana.bundle.js?v=15063:12:1959)
   at http://192.168.1.62:5601/bundles/kibana.bundle.js?v=15063:1:9200
   at processQueue (http://192.168.1.62:5601/bundles/commons.bundle.js?v=15063:38:23621)
   at http://192.168.1.62:5601/bundles/commons.bundle.js?v=15063:38:23888
   at Scope.$eval (http://192.168.1.62:5601/bundles/commons.bundle.js?v=15063:39:4619)
   at Scope.$digest (http://192.168.1.62:5601/bundles/commons.bundle.js?v=15063:39:2359)
   at Scope.$apply (http://192.168.1.62:5601/bundles/commons.bundle.js?v=15063:39:5037)
   at done (http://192.168.1.62:5601/bundles/commons.bundle.js?v=15063:37:25027)
   at completeRequest (http://192.168.1.62:5601/bundles/commons.bundle.js?v=15063:37:28702)

here is index details

PUT number
{
  "mappings": {
    "my_type": {
      "properties": {
        "ExpireTime": {
          "type":       "long"
        }
      }
    }
  }
}
PUT number/my_type/1
{
  "ExpireTime": 1
}
PUT number/my_type/2
{
  "ExpireTime": 1.1
}
PUT number/my_type/3
{
  "ExpireTime": null
}

How can i over come with this problem?

Thank You

2

Hi kabali12345,

What version of kibana are you using? And what is the query you are using in the discovery searchbox?

Can you try exists:ExpireTime and see if it works?

Cheers,
LG

3

Yes it's worked
Thank you @luiz.santos

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.