I don't know why there are no hits

Elastic Stack Elasticsearch
1

no hits

image
image.png1719×663 59 KB

hits

image
image.png1099×693 49.2 KB

management index pattern :

image
image.png1423×743 36.3 KB

2

What is the mapping?

3

this is 'put template' query

PUT _template/installstatus
{
"index_patterns": "installstatus-*",
"settings": {
"number_of_replicas": 1,
"number_of_shards":3
},
"mappings": {
"installstatus": {
"properties": {
"DomainID": {
"type": "long"
},
"UserID": {
"type": "keyword"
},
"DeviceID": {
"type": "keyword"
},
"RegDate": {
"type": "date",
"format": "yyyyMMddHHmmss"
},
"UpdateDate": {
"type": "date",
"format": "yyyyMMddHHmmss"
},
"InputDate": {
"type": "date",
"format": "yyyyMMddHHmmss"
},
"Status": {
"type": "keyword"
},
"ComputerName": {
"type": "text"
},
"OSCode": {
"type": "keyword"
},
"OSName": {
"type": "keyword"
},
"ServicePackVersion": {
"type": "keyword"
},
"IP": {
"type":"keyword"
},
"ClientVersion": {
"type":"keyword"
},
"FsdVersion": {
"type":"keyword"
},
"FsfdVersion": {
"type":"keyword"
},
"RemoteIP": {
"type":"keyword"
}
}
}
}
}

4

As all timestamps in Elasticsearch are assumed (and must be) in UTC timezone, that date seems to be in the future, which is probably why it does not show up when searching the last 90 days.

5

Aha, thank you so much!!!

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.