Hi all, i`m Junior ElasticSearch and i write english not very well.
So I had a data logs indexed with more than 60Gb ,inside it have a field structure :
[2013-01-31T03:01:11+07:00] 141.0.9.194 - HIT (0.000) "GET /images/bg-arrow.gif HTTP/1.1" - 200 "http://m.vnexpress.net/kinhdoanh/tau-hoang-nghin-tan-duoc-bao-hiem-hang-chuc-ty-dong/2421236/p0" 730 - "Opera/9.80 (Android; Opera Mini/7.5.31657/28.3590; U; vi) Presto/2.8.119 Version/11.10"
=> I Need to filter :ip (141.0.9.194),datatime(2013-01-31T03:01:11+07:00)..ect
filter each segment for arrange purpose (such as top 100 ip address hit website in 5 minutes).
thanks !