Lucene @timestamp rounding question


(WANJUNE_KIM) #1

I am trying to retrive total count of todays requests.
To do this, the beginning of time span sould 'today 00:00:00' and the end of time span sould 'now'.
How can I specify these 2 values in lucene syntanx query box of discovery page ?
I've tried several times like '@timestamp:[NOW/DAY TO NOW]'.. and so on. It didn't work.

Please Help !!


(David Pilato) #2

It should be probably something like: @timestamp:[now/d TO now] I believe.


(WANJUNE_KIM) #3

Oh my god ! It works. Really thank you sir !


(David Pilato) #4

But note that it's definitely better to use something like @timestamp:[now/d TO now+1d/d] as now won't really move so the cache usage will be better.


(system) #5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.