Hello all,
The issue is I have a terms panel in Kibana that I want to group events by
a "date" field from each record (Not the @timestamp field). The terms
panel is taking my nicely formatted dates (2014-07-31) and turning them
into longs since UTC (1403568000000). I did a quick test by creating a new
index, giving it a mapping, then running both a search and a facet query,
and sure enough, the facet query returns the long format instead of the
date format! I tried two types of "dates", just to see if that made a
difference. It did not.
=====
#Create mapping for index
PUT /test_index_jerry/test/_mapping
{
"test": {
"properties": {
"date1": {
"type": "date",
"format": "dateOptionalTime"
},
"date2": {
"type": "date",
"format": "date"
}
}
}
}
#Put some data
POST /test_index_jerry/test
{
"date1":"2014-06-30",
"date2":"2014-06-30"
}
#Execute a basic query
GET /test_index_jerry/test/_search
{
"query": {
"match_all": {}
}
}
# It returns dates in "date" format
{
"took": 0,
"timed_out": false,
"_shards": {
"total": 2,
"successful": 2,
"failed": 0
},
"hits": {
"total": 1,
"max_score": 1,
"hits": [
{
"_index": "test_index_jerry",
"_type": "test",
"_id": "VUOeBuiUTGeqBS2Zl8--lg",
"_score": 1,
"_source": {
"date1": "2014-06-30",
"date2": "2014-06-30"
}
}
]
}
}
#Execute a terms facet
GET /test_index_jerry/test/_search
{
"facets": {
"terms": {
"terms": {
"field": "date1",
"size": 10,
"order": "count",
"exclude": []
}
}
}
}
#Now we have longs
{
"took": 1,
"timed_out": false,
"_shards": {
"total": 2,
"successful": 2,
"failed": 0
},
"hits": {
"total": 1,
"max_score": 1,
"hits": [
{
"_index": "test_index_jerry",
"_type": "test",
"_id": "VUOeBuiUTGeqBS2Zl8--lg",
"_score": 1,
"_source": {
"date1": "2014-06-30",
"date2": "2014-06-30"
}
}
]
},
"facets": {
"terms": {
"_type": "terms",
"missing": 0,
"total": 1,
"other": 0,
"terms": [
{
"term": 1404086400000,
"count": 1
}
]
}
}
}
===========
Is there some way I can get the term to stay in date formatted buckets? I
also tried the date histogram facet, but it returned longs as well.
Very much appreciate the help :)
Thanks,
Chris
--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/CAND3Dpjkq0BFL3E_-CgDB4%3DMayZPHCDm%2BcafQef2u3xfNt4qQg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
