Can elasticsearch only store results?

Elastic Stack Elasticsearch
1

HI,

We use ELK for analyze Nginx log(200G/d)，now， we feed the log to elasticsearch after filter it by Logstash(so slow..)，then construct visualizations of search results and create some dashbord with them.

but the original Nginx logs which put to elasticsearch more bigger day after day，so, I want to know that
can elasticsearch only store the search results of visualizations?

2

You mean index that data into ES, then run your visualisation, then save just that aggregated data into ES and remove the original data?

If so, no.

3

yes, I men this....

why not, I only need the results...

4

Because it cannot just generate the results from nothing for starters.

You may be able to do this, but it's not anything ES provides natively.

5

I see, thanks.

发自我的 iPhone

在 2015-7-23，下午6:31，Mark Walkom noreply@discuss.elastic.co 写道：