Need help framing the query, wildcard search and range


#1

My index "access_recs" and mapping for type "config" are like this:
{
"access_recs": {
"mappings": {
"config": {
"properties": {
"timestamp": {
"type": "date",
"format": "epoch_second"
},
"destUpdate": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
}
}
}
}
}
}

How should I frame the query such that I obtain documents matching wildcard search of "destUpdate" (e.g destUpdate = "ustexas*") and with timestamp > last 2 days?


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.