Time stamps, mappings, and range filters

Elastic Stack Elasticsearch
1

Hello all,

First time posting!
I was having some difficulty with time stamps. In the files i am parsing the time is formatted as HH:MM:ss:.SSS, I try and run this query :

GET /logs-index/_search
{
  "query": {
    "range": {
      "time": {
        "gte": "14:00:00.123",
        "lte": "15:00:00.123"
      }
    }
  }
}

When I go to the mappings for my time field it says

  "time": {
         "type": "string"
  }

I figure I need to update the mapping of this, but I am unsure how.

Thanks for any suggestions!
-Aaron

2

You can not update a mapping. Create a new index, define the mapping, then index your data.

3

Thanks! worked like a charm