in Kibana
first
GET action_log_2017/action_log_2017/_search?scroll=5m
{
"query": {
"range": {
"IDX": {
"gte": 100,
"lte": 201709160000802655
}
}
},
"sort": [
{
"IDX": {
"order": "desc"
}
}
],
"size": 10000
}
and next got scroll id
"DnF1ZXJ5VGhlbkZldGNoDAAAAAAAB_3_FkVScEc4UDhUVHNHdm52SmtzT3RWQ0EAAAAAAAatnhZ2Q2ZNNWJnb1NPNjJCU0tnbzREejRnAAAAAAABJDQWVWtmM1ppUEFUa201aExDZ293V0M3dwAAAAAAB_4AFkVScEc4UDhUVHNHdm52SmtzT3RWQ0EAAAAAAAEj4xZMYzkxQUs1N1RvNkotR0NZcjlza0dRAAAAAAAGeCMWNVBVX0JpUTFTQXUxRXc0bkZFcDBaZwAAAAAABSXmFndlbElhaEhKVGR5V0N4NHZZYzlUeWcAAAAAAAatnxZ2Q2ZNNWJnb1NPNjJCU0tnbzREejRnAAAAAAAGeCQWNVBVX0JpUTFTQXUxRXc0bkZFcDBaZwAAAAAAB_4BFkVScEc4UDhUVHNHdm52SmtzT3RWQ0EAAAAAAAatoBZ2Q2ZNNWJnb1NPNjJCU0tnbzREejRnAAAAAAABJDUWVWtmM1ppUEFUa201aExDZ293V0M3dw=="
then I try to decode it but got
queryThenFetchaqdU's僅EG4wf礦紷Ed4j١gd6dӖ&v崳c$%4涳DGㆰCAeV棵敄F擖䄶v絴3wpxYI\အQQ͝ٹ٩퍽љ
1줅,ԝQ왨坍eȥͭD̘ՁU} 儅Mԅܑ陕i쀀瘙ݕ᥅ᡩQᥝ
љe쥑圀漙ٍ鴕靽M<؉ M-�葜ИՁU} 儅Mԅܑ陕i쀀ERpG8P8TTsGvnvJksOtVCA�vCfM5bgoSO62BSKgo4Dz4g$5Ukf3ZiPATkm5hLCgowWC7w
who knows why?