Hello
I have @timestamp field which is in following format
Jul 3, 2022 @ 06:55:55.153
How can I filter logs between 06:00 and 10:00 without mentioning days and months in KQL or Lucene query language.
Hello
I have @timestamp field which is in following format
Jul 3, 2022 @ 06:55:55.153
How can I filter logs between 06:00 and 10:00 without mentioning days and months in KQL or Lucene query language.
Thanks, However I do not want to use mapping solution in my issue, because in 8.x and later version it is not able to use mapping.
Really? You can use runtime mappings also in 8.x.
Thanks Tomo for your replies
I have resolved my problem by creating an scripted fields which contain following script.
return LocalDateTime.ofInstant(Instant.ofEpochMilli(doc['@timestamp'].value.millis),ZoneId.of('Iran')).getHour()
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.