GET /logstash-jsy/nginx-access/_search
{
"query": {
"bool": {
"filter": [
{ "range": { "createdTime": { "gte": "20/Jun/2017:23:19:15 +0800" }}}
]
}
}
}
{
"query": {
"bool": {
"filter": [
{ "range": { "createdTime": { "gte": "20/Jun/2017:23:19:15 +0800" }}}
]
}
}
}
2 个回复
strglee
赞同来自:
可以新建一个hour字段保存小时信息
xinfanwang
赞同来自: