I have a document which has information related to Methodlogger.
My log line looks like this
[TIMESTAMP] [LOG_TYPE] [MESSAGE]
Timestamp, Log_type, Message are different fields in a single document .
The message field contains information as
Is it possible to make a search based time greater than 1000ms as the Message filed type is string.