We want to extract data for last 15 days only for business hour[8AM-8PM]
by skipping other than business hours .
Is it possible to extract data like this in one file download only ?
By "extract data" I assume you mean query it from an existing index? It all depends on what you have indexed, and different ways of organizing your indexing schema can make this easier or harder. For example if you enrich your logs with a field to indicate that this is within your core business hours, it becomes a very simple query.
You can formulate queries to filter based on date ranges. You'll want to look at the range query, and depending on your schema may need to do a boolean query.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.