Reputation: 5215
I'm trying to query events where 'total > 500', but it doesn't work correctly. Microanalysis for field total says it's type is long.
I imported from CSV, than mutated to integer
mutate {
convert => [ "total", "integer" ]
}
Upvotes: 1
Views: 684
Reputation: 5215
Finally found the solution
total:>500
More info at Lucene Query String Elasticsearch "less than or equal to"[URI Search]
Upvotes: 2