# Searchquery using timestamp in "and" condition issue

**URL:** <https://discuss.elastic.co/t/searchquery-using-timestamp-in-and-condition-issue/251094>\
**Category:** Elasticsearch\
**Created:** [October 6, 2020, 9:39am UTC](https://discuss.elastic.co/t/searchquery-using-timestamp-in-and-condition-issue/251094 "2020-10-06T09:39:36Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![tomaszde](https://avatars.discourse-cdn.com/v4/letter/t/c6cbf5/32.png) [@tomaszde](https://discuss.elastic.co/u/tomaszde)\
**Post date:** [October 6, 2020, 9:39am UTC](https://discuss.elastic.co/t/searchquery-using-timestamp-in-and-condition-issue/251094/1 "2020-10-06T09:39:36Z")

</div>

hi,  
I'm getting more hits with more exclusive search using "and" with timestamp.  
is it a bug or the query syntax is wrong ?

query1

```auto
    GET /myindex-*/_search?_source=true&track_total_hits=true
    {
      "query": {
        "query_string": {
          "query": "(@timestamp:>=now-1m)"
        }
      }
    }

```

result:

```auto
    {
      "took" : 7,
      "timed_out" : false,
      "_shards" : {
        "total" : 28,
        "successful" : 28,
        "skipped" : 0,
        "failed" : 0
      },
      "hits" : {
        "total" : {
          "value" : 88,
          "relation" : "eq"
        },

```

query2

```auto
    GET /myindex-*/_search?_source=true&track_total_hits=true
    {
      "query": {
        "query_string": {
          "query": "(kubernetes.namespace:ns1) and (@timestamp:>=now-1m)"
        }
      }
    }

```

result:

```auto
    {
      "took" : 90,
      "timed_out" : false,
      "_shards" : {
        "total" : 28,
        "successful" : 28,
        "skipped" : 0,
        "failed" : 0
      },
      "hits" : {
        "total" : {
          "value" : 2013173,
          "relation" : "eq"
        },

```

---

<div class="post-metadata">

**Author:** ![tomaszde](https://avatars.discourse-cdn.com/v4/letter/t/c6cbf5/32.png) [@tomaszde](https://discuss.elastic.co/u/tomaszde)\
**Post date:** [October 6, 2020, 9:49am UTC](https://discuss.elastic.co/t/searchquery-using-timestamp-in-and-condition-issue/251094/2 "2020-10-06T09:49:31Z")

</div>

> [@tomaszde](#):
>
> `query_string`

Issue is solved. It should be "AND" in query not the "and"

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 3, 2020, 9:49am UTC](https://discuss.elastic.co/t/searchquery-using-timestamp-in-and-condition-issue/251094/3 "2020-11-03T09:49:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.