# Searching elastic unique user data in specific time in elasticsearch
**URL:** https://discuss.elastic.co/t/searching-elastic-unique-user-data-in-specific-time-in-elasticsearch/22683
**Category:** Elasticsearch
**Created:** [March 16, 2015, 11:26am UTC](https://discuss.elastic.co/t/searching-elastic-unique-user-data-in-specific-time-in-elasticsearch/22683 "2015-03-16T11:26:45Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Mitul\_Golakiya](https://discuss.elastic.co/u/Mitul_Golakiya)
#### Post date: [March 16, 2015, 11:26am UTC](https://discuss.elastic.co/t/searching-elastic-unique-user-data-in-specific-time-in-elasticsearch/22683/1 "2015-03-16T11:26:45Z")
Hello All,
We are tacking user with elastic search. I want to retrieve data like,
Check if same mac address was there for more than 5 times in 1 minute of
timeframe.
How can I retrieve data like this ?
Thanks.
--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/49ff391f-c64c-4d7b-8990-f126de1e2de0%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/49ff391f-c64c-4d7b-8990-f126de1e2de0%40googlegroups.com).
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [March 16, 2015, 5:49pm UTC](https://discuss.elastic.co/t/searching-elastic-unique-user-data-in-specific-time-in-elasticsearch/22683/2 "2015-03-16T17:49:25Z")
You can do a search to find what events the address was found in, but time
window analysis like that you will have to do yourself.
On 16 March 2015 at 04:26, Mitul Golakiya [mtl.golakiya@gmail.com](mailto:mtl.golakiya@gmail.com) wrote:
> Hello All,
>
> We are tacking user with Elasticsearch. I want to retrieve data like,
>
> Check if same mac address was there for more than 5 times in 1 minute of
> timeframe.
>
> How can I retrieve data like this ?
>
> Thanks.
>
> --
> You received this message because you are subscribed to the Google Groups
> "elasticsearch" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).
> To view this discussion on the web visit
> [https://groups.google.com/d/msgid/elasticsearch/49ff391f-c64c-4d7b-8990-f126de1e2de0%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/49ff391f-c64c-4d7b-8990-f126de1e2de0%40googlegroups.com)
> [https://groups.google.com/d/msgid/elasticsearch/49ff391f-c64c-4d7b-8990-f126de1e2de0%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/49ff391f-c64c-4d7b-8990-f126de1e2de0%40googlegroups.com?utm_medium=email&utm_source=footer)
> .
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9aP2K5RNgw8mh9TX98E2iL175Ayr%3D%2B134HDdRF7eNWaA%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9aP2K5RNgw8mh9TX98E2iL175Ayr%3D%2B134HDdRF7eNWaA%40mail.gmail.com).
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
---
### Author:  [@Jaroslaw\_Zawila](https://discuss.elastic.co/u/Jaroslaw_Zawila)
#### Post date: [March 16, 2015, 10:37pm UTC](https://discuss.elastic.co/t/searching-elastic-unique-user-data-in-specific-time-in-elasticsearch/22683/3 "2015-03-16T22:37:29Z")
I think you can achieve something like that using aggregations but the time
will not over lap.
Depends what do you want to achieve ?? If you like the sliding windows kind
of behaviour you will have to call elasticsearch in some period of time.
I will try to make some working example tomorrow evening and will post back.
On Monday, March 16, 2015 at 11:26:45 AM UTC, Mitul Golakiya wrote:
> Hello All,
>
> We are tacking user with Elasticsearch. I want to retrieve data like,
>
> Check if same mac address was there for more than 5 times in 1 minute of
> timeframe.
>
> How can I retrieve data like this ?
>
> Thanks.
--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/4a2db471-cdf9-47ee-ba85-feb3ab2bcac7%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/4a2db471-cdf9-47ee-ba85-feb3ab2bcac7%40googlegroups.com).
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 12:26am UTC](https://discuss.elastic.co/t/searching-elastic-unique-user-data-in-specific-time-in-elasticsearch/22683/4 "2017-07-06T00:26:24Z")