Hi,
I have been witnessing a weird behavior when trying to query elasticsearch.
Ex:
GET my_logs*/_search
{
"query": {"bool": {"must": [
{"range": {"timestamp": {"gt": "now-1M"}}}
]
}
}
}
returns:
{
"took" : 8,
"timed_out" : false,
"_shards" : {
"total" : 13,
"successful" : 13,
"skipped" : 0,
"failed" : 0
},
"hits" : {
"total" : {
"value" : 0,
"relation" : "eq"
},
"max_score" : null,
"hits" : [ ]
}
}
Whereas, If I change 'range' to 'now-2w' , the query returns hits. I'm confused with this behaviour, if 2 weeks old data query returns hits, why does 1 month old returns zero hits.
I don't see any errors in elasticsearch logs. (Discover tab in Kibana shows proper results as expected)
Elasticsearch version: 7.0.0