also very strange: I am not able to reproduce the screenshots above:
The following query in discover gives me following screen:
"(type.keyword: ttpgwy_metrics OR logType.keyword: ttpgwy_metrics) AND metricsName.keyword: received.rate AND metricsM1: 8.606505135116292e-22
I get the following:
discover panel is generating following query:
{
"version": true,
"size": 500,
"sort": [
{
"@timestamp": {
"order": "desc",
"unmapped_type": "boolean"
}
}
],
"_source": {
"excludes": []
},
"aggs": {
"2": {
"date_histogram": {
"field": "@timestamp",
"interval": "1m",
"time_zone": "Europe/Berlin",
"min_doc_count": 1
}
}
},
"stored_fields": [
"*"
],
"script_fields": {
"system.cpu.used.pct_scr": {
"script": {
"inline": "doc['system.cpu.system.pct'].value + doc['system.cpu.user.pct'].value",
"lang": "painless"
}
},
"system.process.pidDetails": {
"script": {
"inline": "doc['system.process.name.keyword'].value + ' ' + doc['system.process.username.keyword'].value + ' ' + doc['system.process.pid'].value",
"lang": "painless"
}
}
},
"docvalue_fields": [
"@timestamp",
"logstash.processing.filterEnd",
"logstash.processing.filterStart",
"pidCreationTime",
"system.process.cpu.start_time"
],
"query": {
"bool": {
"must": [
{
"query_string": {
"query": "(type.keyword: ttpgwy_metrics OR logType.keyword: ttpgwy_metrics) AND metricsName.keyword: received.rate AND metricsM1: 8.606505135116292e-22",
"analyze_wildcard": true,
"default_field": "*"
}
},
{
"match_phrase": {
"stage": {
"query": "PreProd"
}
}
},
{
"range": {
"@timestamp": {
"gte": 1524829477544,
"lte": 1524835558149,
"format": "epoch_millis"
}
}
}
],
"filter": [],
"should": [],
"must_not": []
}
}
}
and this is the response:
{
"took": 10,
"hits": {
"hits": [
{
"_index": "perf-staging-2018.04.27",
"_type": "doc",
"_id": "HHUAB2MB1NbPm5FDCar2",
"_version": 1,
"_score": null,
"_source": {
"logstash": {
"processing": {
"filterStart": "2018-04-27T12:07:13.138Z",
"filterEnd": "2018-04-27T12:07:13.141Z",
"filterTime": 3
}
},
"serverType": "map",
"stage": "PreProd",
"source": "G:\\TTP-Gateway5645_IPVPN_TBM2\\metrics\\ttpgw-metrics.log",
"offset": 847169,
"metricsMeanRate": 0.07030142025283972,
"metricsType": "METER",
"metricsM5": 0.00005852577967023545,
"@timestamp": "2018-04-27T12:07:08.340Z",
"application": "ttpgwy_5645_TBM_2",
"@version": "1",
"hostName": "logippmap",
"beat": {
"version": "6.2.3",
"name": "LOGIPPMAP",
"hostname": "LOGIPPMAP"
},
"metricsM1": 8.606505135116292e-22,
"metricsM15": 0.021910089437787685,
"metricsName": "received.rate",
"logType": "ttpgwy_metrics",
"metricsCount": 504
},
"fields": {
"logstash.processing.filterStart": [
"2018-04-27T12:07:13.138Z"
],
"logstash.processing.filterEnd": [
"2018-04-27T12:07:13.141Z"
],
"@timestamp": [
"2018-04-27T12:07:08.340Z"
],
"system.cpu.used.pct_scr": [
0
],
"system.process.pidDetails": [
"null null 0"
]
},
"sort": [
1524830828340
]
}
],
"total": 1,
"max_score": 0
},
"aggregations": {
"2": {
"buckets": [
{
"key_as_string": "2018-04-27T14:07:00.000+02:00",
"key": 1524830820000,
"doc_count": 1
}
]
}
}
}
