Hi,
I want to search all the entries within a time span.
Like this: search all the entries during a time span from 2017-07-02 12:05:51.898
to 2017-07-02 12:06:15.464
I know 2017-07-02 12:05:51.898
in epoch_millis is 1499022351898
, and 2017-07-02 12:06:15.464
in epoch_millis is 1499022375464
.
So
@timestamp: [1499022351898 TO 1499022375464]
can do the job.
But epoch_millis is not quite friendly for search. So something like:
@timestamp: [2017-07-02 12:05:51.898 TO 2017-07-02 12:06:15.464]
is what I want. But it does not work.
I know it can be done by json query. But it is too long and too messy.
Any help would be appreciated!