I am facing the problem that I have high throughput JSON logs. I don't want to store the logs with that accuracy, but the sender is not configurable.
I wonder if Logstash can do something for me to calculate the median of all logs per minute on a chosen field. And instead of forwarding all the Logs to Elasticsearch, it could write one log-line per minute.
Is there any times series aggregation in Logstash for that?