# Need help filter data indexed!

**URL:** <https://discuss.elastic.co/t/need-help-filter-data-indexed/11288>\
**Category:** Elasticsearch\
**Created:** [March 25, 2013, 9:45am UTC](https://discuss.elastic.co/t/need-help-filter-data-indexed/11288 "2013-03-25T09:45:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![XabiAlonso](https://avatars.discourse-cdn.com/v4/letter/x/f6c823/32.png) [@XabiAlonso](https://discuss.elastic.co/u/XabiAlonso)\
**Post date:** [March 25, 2013, 9:45am UTC](https://discuss.elastic.co/t/need-help-filter-data-indexed/11288/1 "2013-03-25T09:45:24Z")

</div>

This post has NOT been accepted by the mailing list yet.  
Hi all, i`m Junior ElasticSearch and i write english not very well.

"So I had a data logs indexed with more than 60Gb ,inside it have a field structure :

**[2013-01-31T03:01:11+07:00] 107.4.57.86 10.94.0.8:80** - (0.146) "GET /thethao/hau-truong/3-vdv-anh-khoa-than-tren-tap-chi-dong-tinh/2418984/p0 HTTP/1.1" 200 200 "[http://m.vnexpress.net/thethao/hau-truong/nguoi-xua-cua-ferrari-khoe-go-bong-dao-/2418714/p0](http://m.vnexpress.net/thethao/hau-truong/nguoi-xua-cua-ferrari-khoe-go-bong-dao-/2418714/p0)" 9723 0.146 "Mozilla/5.0 (iPhone; U; CPU iPhone OS 4\_3\_3 like Mac OS X; vi-vn) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8J2 Safari/6533.18.5"  
source: file://log-hcm-new/opt/log-vne/mvne.log"

=\> I Need to filter :ip (141.0.9.194),datatime(2013-01-31T03:01:11+07:00)..ect  
filter each segment for arrange purpose (such as top 100 ip address hit website in 5 minutes).  
QueyDSL can solve my solution?

thanks !

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:44am UTC](https://discuss.elastic.co/t/need-help-filter-data-indexed/11288/2 "2017-07-06T02:44:49Z")

</div>