Ability to filter the results with a configurable amount of lines around an event

Elastic Stack Elasticsearch
1

one big aspect of log analysis is to pinpoint a problematic event and than
see the surrounding events.
Is there a way to query for X number of event before and after the event ?

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/aa97c0bb-9c7c-444b-8e70-c70e26e61552%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

2

You can do this using the timestamp (with a range, and grow it if
necessary) or if you have a serial ID of some sort on the log message you
can do a range query on that

--

Itamar Syn-Hershko
http://code972.com | @synhershko https://twitter.com/synhershko
Freelance Developer & Consultant
Author of RavenDB in Action http://manning.com/synhershko/

On Mon, Aug 11, 2014 at 10:56 PM, Ran Davidovitz ran.davidovitz@gmail.com
wrote:

one big aspect of log analysis is to pinpoint a problematic event and than
see the surrounding events.
Is there a way to query for X number of event before and after the event ?

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/aa97c0bb-9c7c-444b-8e70-c70e26e61552%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/aa97c0bb-9c7c-444b-8e70-c70e26e61552%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAHTr4Zuz0eUdDVU6EagCBc8ruk05xmiLFFCHeX7h3oAQAbQ3xA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.