Query by timestamp in ElasticSearch

Question

I would like to make a query in elastic search such as I only get the last 40 data I have on my database. For the moment my query is such :

  {
    "size": 40,
    "query" : {
      "exists": {
      "field": "transaction.domain"
      }
      "range": {
      "@timestamp" : {
          "from": "now-30mn",
          "to": "now"
      }
    }
    }
  }

Thanks for your help. Victoire

Amit · Accepted Answer · 2022-07-13 10:04:27Z

3

You are almost there, you just need to add sorting on your timestamp field.

below query should work for you.

{
    "size": 40,
    "query": {
        "exists": {
            "field": "transaction.domain"
        },
        "range": {
            "@timestamp": {
                "from": "now-30mn",
                "to": "now"
            }
        }
    },
    "sort": [
        {
            "@timestamp": "desc"
        }
    ]
}

answered Jul 13, 2022 at 10:04

Amit

32.5k7 gold badges68 silver badges101 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Query by timestamp in ElasticSearch

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related