Query String Syntax for timestamp like this: 12:30:42:069

I'm trying to isolate a range based on custom timestamps; example:

myTimestamp: 12:30:42:069

Date type: string

I'm getting this error:

Discover: Expected AND, OR, end of input, whitespace but ":" found.

Attempts at QSS:

myTimestamp >12:30:42:069 // nope
myTimestamp >'12:30:42:069' // nope
myTimestamp >"12:30:42:069" // nope
myTimestamp.keyword >12:30:42:069 // nope
myTimestamp.keyword >'12:30:42:069' // nope
myTimestamp.keyword >"12:30:42:069" // nope

How can I apply this filter condition?

Thx, Keith :^)

That's not a logstash question, you might get an answer if you move the question to the kibana forum.

1 Like

Ooh sorry I meant to post there.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.