0

I'm trying perform an elasticsearch query as a GET request in order pull data from the index which I created. The data which is in the index is, a table from MySQL DB, configured though logstash.

Here is my request without the IN clause:

http://localhost:9200/response_summary/_search?q=api:"location"+AND+transactionoperationstatus:"charged"+AND+operatorid='DIALOG'+AND+userid:test+AND+time:"2015-05-27"

In the above, I should be able to append AND responseCode IN (401,403). I tried giving it a search on the web, but couldn't find any solutions.

Any help could be appreaciated.

Kulasangar
  • 9,046
  • 5
  • 51
  • 82

1 Answers1

1

Simply append either of these:

  • responseCode:(401 403)
  • responseCode:(401 OR 403)
  • responseCode:(401 || 403)

Like this:

http://localhost:9200/response_summary/_search?q=api:"location"+AND+transactionoperationstatus:"charged"+AND+operatorid='DIALOG'+AND+userid:test+AND+time:"2015-05-27"+AND+responseCode:(401+403)
Val
  • 207,596
  • 13
  • 358
  • 360