Lucene query search not working in graylog


(Ganeshbabu Ramamoorthy) #1

Hi All,

I am trying to search data in graylog using range query syntax…
destination_real_port:(>=5580 AND <=6303)

but the results fetching from the query its not expected response. The values which are coming is not in the specified range given in the query.

Please find the screenshot and I followed the below link
http://docs.graylog.org/en/2.3/pages/queries.html#search-query-language

Correct me If I am doing anything wrong.

Thanks,
Ganeshbabu R


(Jochen) #2

Is destination_real_port really a numeric field? The comparison operators only work with numeric fields.

Check the index mapping in Elasticsearch and create a custom index mapping (see http://docs.graylog.org/en/2.3/pages/configuration/elasticsearch.html#custom-index-mappings) to ensure the correct data type.


(Ganeshbabu Ramamoorthy) #3

Yes the field type is not numeric and we changed the field type to numeric datatype…


(system) #4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.