# Query range not working?

**URL:** <https://discuss.elastic.co/t/query-range-not-working/81105>\
**Category:** Elasticsearch\
**Created:** [April 4, 2017, 9:22am UTC](https://discuss.elastic.co/t/query-range-not-working/81105 "2017-04-04T09:22:29Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![agonzalez](https://avatars.discourse-cdn.com/v4/letter/a/ba8739/32.png) [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Post date:** [April 4, 2017, 9:22am UTC](https://discuss.elastic.co/t/query-range-not-working/81105/1 "2017-04-04T09:22:29Z")

</div>

I am doing this query but it is returning documents older:

```
get /ueb-metrics-*/_search
{
  "query": {
    "range": {
      "timestamp": {
        "gte": "now-1d"
      }
    }
  }
}

```

returns docs from months ago like:

```
hits": [
      {
        "_index": "ueb-metrics-2017.01",
        "_type": "object",
        "_id": "d6b3ec11-ecd9-47e2-842a-99574ff8b3a0_storage_2017.01.18_14.00",
        "_score": 1,
        "_source": {
          "type": "storage",
          "asset_tag": "d6b3ec11-ecd9-47e2-842a-99574ff8b3a0",
          "timestamp": "2017-01-18T14:00:01.694245+01:00",
          "storage": {
            "name": "Internal",
            "mb_free": 135978,
            "mb_size": 153521,
            "mb_used": 17543,
            "mb_to_purge": 3166,
            "percent_used": "11.43%",
            "average_write_speed": "N/A",
            "dedup": "N/A"
          }
        }
```

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 4, 2017, 9:39am UTC](https://discuss.elastic.co/t/query-range-not-working/81105/2 "2017-04-04T09:39:39Z")

</div>

Depending on your client may be try with POST instead of GET

What is the mapping?

---

<div class="post-metadata">

**Author:** ![agonzalez](https://avatars.discourse-cdn.com/v4/letter/a/ba8739/32.png) [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Post date:** [April 4, 2017, 11:54am UTC](https://discuss.elastic.co/t/query-range-not-working/81105/3 "2017-04-04T11:54:49Z")

</div>

so confusing. using POST it works, i am using kibana dev tools to run the query

If i use GET in another index it with some query it works, but in this index i have to use POST.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 4, 2017, 12:44pm UTC](https://discuss.elastic.co/t/query-range-not-working/81105/4 "2017-04-04T12:44:08Z")

</div>

If you are using Kibana console change `get` to `GET` and look if it fixes your issue.

---

<div class="post-metadata">

**Author:** ![agonzalez](https://avatars.discourse-cdn.com/v4/letter/a/ba8739/32.png) [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Post date:** [April 4, 2017, 10:40pm UTC](https://discuss.elastic.co/t/query-range-not-working/81105/5 "2017-04-04T22:40:31Z")

</div>

I was using GET already

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 4, 2017, 10:52pm UTC](https://discuss.elastic.co/t/query-range-not-working/81105/6 "2017-04-04T22:52:39Z")

</div>

Make sure there is no empty line between the GET xxx line and the body.

What version are you using?

---

<div class="post-metadata">

**Author:** ![agonzalez](https://avatars.discourse-cdn.com/v4/letter/a/ba8739/32.png) [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Post date:** [April 4, 2017, 10:54pm UTC](https://discuss.elastic.co/t/query-range-not-working/81105/7 "2017-04-04T22:54:02Z")

</div>

No empty line. I am using 5.2.0

```
GET /ueb-appliance*/_search
{
  "query": {
    "range": {
      "timestamp": {
        "gte": "now-1d"
      }
    }
  }
}
```

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 4, 2017, 11:11pm UTC](https://discuss.elastic.co/t/query-range-not-working/81105/8 "2017-04-04T23:11:25Z")

</div>

Can't reproduce it. Weird

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 2, 2017, 11:11pm UTC](https://discuss.elastic.co/t/query-range-not-working/81105/9 "2017-05-02T23:11:38Z")

</div>

Closed on May 2, 2017, 11:11pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.