I have a number of different servers (php, java...). All of the servers uses different user tracking cookies and are behind nginx.
I already have access.log with all cookies I need and all of them are feeded to ES with logstash.
Now I want to analyze logs to see metrics: unique visitors per page, unique user_agents per page and so on. In RDMBS I would create view with complex SELECT to distinguish visitors. Not sure this is right way in ES.
Should I build/calculate these metrics outside ES or there is good way to do it in ES?