# Compact timeline data

**URL:** <https://discuss.elastic.co/t/compact-timeline-data/102853>\
**Category:** Elasticsearch\
**Created:** [October 5, 2017, 2:48pm UTC](https://discuss.elastic.co/t/compact-timeline-data/102853 "2017-10-05T14:48:59Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ebuildy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ebuildy/32/6070_2.png) [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Post date:** [October 5, 2017, 2:48pm UTC](https://discuss.elastic.co/t/compact-timeline-data/102853/1 "2017-10-05T14:48:59Z")

</div>

Using beat to monitor everything, we would like to "compact" timeline data after 3 days:

Change time scale from 1 minute to 1 hour . (by an average aggregation).

In order to save disk space.

Any plugin or suggestion?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 6, 2017, 1:31am UTC](https://discuss.elastic.co/t/compact-timeline-data/102853/2 "2017-10-06T01:31:50Z")

</div>

Why not just change the compression of the index to `best_compression`?

Otherwise, you'd need to write something to aggregate the data yourself.

---

<div class="post-metadata">

**Author:** ![ebuildy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ebuildy/32/6070_2.png) [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Post date:** [October 6, 2017, 6:57am UTC](https://discuss.elastic.co/t/compact-timeline-data/102853/3 "2017-10-06T06:57:43Z")

</div>

Yes this is a solution, but I don't want slower performance.

I am curious to see nothing about that, I believe this is very important for timeline series, maybe I am wrong about the terminology?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 6, 2017, 7:14am UTC](https://discuss.elastic.co/t/compact-timeline-data/102853/4 "2017-10-06T07:14:37Z")

</div>

Your terminology is correct, it's just not anything the Elastic Stack does at this point 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 3, 2017, 7:14am UTC](https://discuss.elastic.co/t/compact-timeline-data/102853/5 "2017-11-03T07:14:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.