Date_histograms --> date_histograms?

Elastic Stack Elasticsearch
1

I'm facing a problem similar to this unanswered question: Is it possible to create a date histogram from the output of a date histogram?

I have event records in an index. I want a 1-minute histogram of the max events/second.

I was thinking toward creating a 1s summing date-histogram to get events/second, and then pipeline that into a 1m max date-histogram. But afaict I date_histogram won't accept a bucket_path.

Is this possible, and if so, what would the syntax look like?

Thanks!

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.