I need to fetch the oldest or newest document saved into a beat. Someone asked this before and this was the suggested course of action:
This approach will NOT work for metricbeat data because you cannot snag over 10000 records at a time and metricbeat produces almost 9000 in one day.
Any suggestions? Thank you!