Roman Rybalko wrote:
24.09.2012 22:23, Howard Chu пишет:
(&) - 57sec (|(logTime=20120920144001+0400)(logTime=20120920144008+0400)) - 0.03sec
Use a correct filter. Your clauses above use invalid syntax.
Point me please, where exactly my syntax is invalid?
You must be blind. You wrote:
(&(logTime>=201209201440+0400)(logTime<=201209201450+0400)) - 57sec
Check the proper format of a GeneralizedTime value. You have omitted the seconds field, so you're effectively looking for every entry greater than the year 20, December 09. The index lookup for this will most likely hit every entry in your DB, which is why it takes 57 seconds.