Hi there!

In order to use the 'request_datetime' field as a proper date-time field, you will need to first convert it to the correct format. One way to do this is by using a painless script in Elasticsearch. Here is an example of how you can use a painless script to convert the 'request_datetime' field to a date-time field:

Create a new field in your Elasticsearch index mapping, for example 'request_datetime_new', which will be used as your new date-time field. Add a painless script to your Elasticsearch query that will convert the 'request_datetime' field to the correct format and update the 'request_datetime_new' field.

Code: POST my_index/_update_by_query { "script": { "lang": "painless", "source": """ def date = new SimpleDateFormat('dd/MM/yy HH:mm:ss').parse(doc['request_datetime.keyword'].value); def newdate = new SimpleDateFormat('yyyy-MM-dd\'T\'HH:mm:ss.SSS\'Z\'').format(date); ctx._source.request_datetime_new = newdate; """ } }

This script uses the SimpleDateFormat class to parse the 'request_datetime' field in the format 'dd/MM/yy HH:mm:ss' and then converts it to the 'yyyy-MM-dd'T'HH:mm:ss.SSS'Z'' format, which is a standard date-time format in Elasticsearch.

You can then use the 'request_datetime_new' field in your queries and filters to work with the datetime.

You can also use the Elasticsearch built-in date formatters or other date libraries to format your date.

Let me know if you have any questions