# RequestElaspedTime

**URL:** <https://discuss.elastic.co/t/requestelaspedtime/256369>\
**Category:** Logstash\
**Created:** [November 23, 2020, 3:08pm UTC](https://discuss.elastic.co/t/requestelaspedtime/256369 "2020-11-23T15:08:01Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![dfoot](https://avatars.discourse-cdn.com/v4/letter/d/ea5d25/32.png) [@dfoot](https://discuss.elastic.co/u/dfoot)\
**Post date:** [November 23, 2020, 3:08pm UTC](https://discuss.elastic.co/t/requestelaspedtime/256369/1 "2020-11-23T15:08:01Z")

</div>

Recently upgraded log message include field requestElapsedTime to replaced elapsed\_tme but from index pattern for requestElaspedTIme the type is 'string' only not 'number' for metric result.

I've added below on logstash conf.d to convert the field type as number and restarted logstash but 'number' field still not on list.

mutate { convert =\> { "requestElapsedTime" =\> "integer" } }

Can someone please advise.

Thanks

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [November 23, 2020, 4:51pm UTC](https://discuss.elastic.co/t/requestelaspedtime/256369/2 "2020-11-23T16:51:03Z")

</div>

If an index already contains documents where that field is type string then even if logstash sends integers elasticsearch will convert them to string as it indexes them. Try rolling over to a new index.

---

<div class="post-metadata">

**Author:** ![dfoot](https://avatars.discourse-cdn.com/v4/letter/d/ea5d25/32.png) [@dfoot](https://discuss.elastic.co/u/dfoot)\
**Post date:** [November 23, 2020, 4:53pm UTC](https://discuss.elastic.co/t/requestelaspedtime/256369/3 "2020-11-23T16:53:44Z")

</div>

OK, next roll over (ILM) is tonight I'll check tomorrow morning.

Yes already contains document i.e. requestElapsedTime=24 in log... and is type string where I want number.

---

<div class="post-metadata">

**Author:** ![dfoot](https://avatars.discourse-cdn.com/v4/letter/d/ea5d25/32.png) [@dfoot](https://discuss.elastic.co/u/dfoot)\
**Post date:** [November 24, 2020, 8:47am UTC](https://discuss.elastic.co/t/requestelaspedtime/256369/4 "2020-11-24T08:47:52Z")

</div>

Test from visualize I created metric, select index and add filter.

Field - requestElapsedTime / requestElapsedTime.keyword  
Operator - is (there is no "is between")  
Values - there are few numerical on list e.g. 24 (ms)

But I am looking for same set up as elapsed\_time 'is between' from 0 to 4 range for SLA but not available for requestElapsedTime.

Please advise.

---

<div class="post-metadata">

**Author:** ![dfoot](https://avatars.discourse-cdn.com/v4/letter/d/ea5d25/32.png) [@dfoot](https://discuss.elastic.co/u/dfoot)\
**Post date:** [November 25, 2020, 2:03pm UTC](https://discuss.elastic.co/t/requestelaspedtime/256369/5 "2020-11-25T14:03:59Z")

</div>

Can someone help with this topic?

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [November 25, 2020, 2:13pm UTC](https://discuss.elastic.co/t/requestelaspedtime/256369/6 "2020-11-25T14:13:44Z")

</div>

What is your question?

---

<div class="post-metadata">

**Author:** ![dfoot](https://avatars.discourse-cdn.com/v4/letter/d/ea5d25/32.png) [@dfoot](https://discuss.elastic.co/u/dfoot)\
**Post date:** [November 25, 2020, 2:16pm UTC](https://discuss.elastic.co/t/requestelaspedtime/256369/7 "2020-11-25T14:16:22Z")

</div>

For field name elapse\_time there is type 'number' where I can select operator 'in between' or 'in not between' the number values. I want the same for requestElapsedTime.

---

<div class="post-metadata">

**Author:** ![dfoot](https://avatars.discourse-cdn.com/v4/letter/d/ea5d25/32.png) [@dfoot](https://discuss.elastic.co/u/dfoot)\
**Post date:** [November 25, 2020, 7:44pm UTC](https://discuss.elastic.co/t/requestelaspedtime/256369/8 "2020-11-25T19:44:28Z")

</div>

if logstash sends integers, elasticsearch will converts field requestElapsedTime to string as it indexes them but I don't see the 'is between" & "is not between" operators on visualisation when create metric.

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [November 25, 2020, 8:01pm UTC](https://discuss.elastic.co/t/requestelaspedtime/256369/9 "2020-11-25T20:01:25Z")

</div>

Use the [mapping](https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-get-mapping.html) API, find the current mapping for requestElapsedTime field. What is the mapping?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 23, 2020, 8:01pm UTC](https://discuss.elastic.co/t/requestelaspedtime/256369/10 "2020-12-23T20:01:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.