Time stamps, mappings, and range filters

(Aaron Gupta) #1

Hello all,

First time posting!
I was having some difficulty with time stamps. In the files i am parsing the time is formatted as HH:MM:ss:.SSS, I try and run this query :

GET /logs-index/_search
  "query": {
    "range": {
      "time": {
        "gte": "14:00:00.123",
        "lte": "15:00:00.123"

When I go to the mappings for my time field it says

  "time": {
         "type": "string"

I figure I need to update the mapping of this, but I am unsure how.

Thanks for any suggestions!

(David Pilato) #2

You can not update a mapping. Create a new index, define the mapping, then index your data.

(Aaron Gupta) #3

Thanks! worked like a charm

(system) #4