Elasticsearch relative time range query in Python

Question

I have searched and searched but cannot find an answer for this. I am new to using Elasticsearch with Python and trying to do a simple Python query against my Elasticsearch index which will return a count of the results matching a specific set of criteria in the past hour. I'm getting all the results back using the following (sanitized) code:

 hits = es.count(index='myindex-*',q=thing.rstrip() )

Simple enough right? So is there a way to include a relative time range in this query, or do I need to write some Python to figure out the times to insert as a time range?

Thanks in advance for the help!

Hugo Sousa · Accepted Answer · 2015-04-22 12:50:39Z

2

Yes, everything you need is a time-based key in your index and then query that key with:

{
    "query" : {
        "range" : {
            "<time_based_key>" : {
                "gte" : "now-1h"
            }
        }
    }
}

To define your time-based key:

curl -XPUT localhost:9200/<database>/<index>/_mapping?pretty -d '
{
    "<index>" : {
        "properties": {
            "<time_based_key>" : {
                "type" : "date",
                "index": "not_analyzed"
            }
        }
    }
}'

answered Apr 22, 2015 at 12:50

Hugo Sousa

9262 gold badges9 silver badges27 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

tcstool Over a year ago

OK that's helpful. Two questions: Can I use @timestamp as my time based key, and how does this translate into using count inside Python?

Hugo Sousa Over a year ago

Yes, you can use whatever key you want, you just need to set it with a date (datetime.now() in Python?). Relatively to count, the dictionary returned by elasticsearch will contains a key called hits and inside the value of hits you will have another key called total meaning the number of results returned.

tcstool Over a year ago

That got me where I needed to be. Thanks!

Collectives™ on Stack Overflow

Elasticsearch relative time range query in Python

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related