When using the Timelion plugin on Kibana, there is an option to select the aggregation bucket. When you add this formula to the dashboard, does Timelion aggregate and create buckets as data comes into elastic search, or does it perform repeated querying every time the time filter is changed on the dashboard?
I was wondering about the time implications of repeated querying of logs over huge datasets.
The Kibana server for the most part relies on elasticsearch for state. Visualizations (not limited to timelion) will re-query on state changes. Your concern on performance is valid one, especially over large time ranges.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.