Querying for a range of dates.

Hello Honza, I’m hoping you might be able to help me out with one last issue i’m having. I need to query for all articles that have 404 errors as a response field and I also need to find all of them from withing the lasts 15 inutes. The issues show up inside of Kibana but they are not showing in my queries.

I’ve been having a really hard time getting this to work and there aren’t any clear examples of querying in a specific range of time in the docs. Here’s my script.

s = Search(using=es, index= "_all") \
        .query("match", response = "404")\
        .filter('range', timestamp={'from': datetime.datetime.now() - datetime.timedelta(minutes=15), 'to' : datetime.datetime.now() }) #, 'lte': datetime(2010, 10, 9)})
        #.filter("range", '@timestamp': {"gte": "now-15m", "lte": "now"}) #, "lt" : "2014-12-31 1:00:00"}) 
        #filter is for a range of possible times. 
        #.filter("range", timestamp={ "gt":"now -5m","lt":"now" })
response = s.execute()

[honzakral]

No, this is neither a logstash problem, nor is it a problem with the library. You are missing ** in front of the dict, it should be:

.filter('range', **{'@timestamp':{'gte': 'now-5m' , 'lt': 'now'}})

Also please stop appending questions to this ticket, this is really not the place to help you and I will not respond to any more questions here. Feel free to contact me another way. Thank you

[honzakral]

use **{'@timestamp': {'gte': 'now-5m' , 'lt': 'now'}}