How to fetch time series messages

Elastic Stack Elasticsearch
2

It appears you would have to stick with standard queries instead of Scroll.

One of the main issues with using queries to page through documents is that
order is not preserved., causing documents to be duplicated or ignored.
However your use case is to order historical documents, so the issue
is alleviated. Are you worried about performance?

Cheers,

Ivan

On Mon, May 13, 2013 at 2:50 PM, vinod eligeti veligeti999@gmail.comwrote:

Hi,

I have general question as how to go through time series data. What I am
trying to do is to store logs which are stamped by time. The doc type looks
like

log
{
machine : String
timestamp : date
message : String

... bunch of other fields
}

machine is the host name of the machine from which logs are retrieved and
stored in ES. I have bunch of other custom fields to store which is the
reason why I am not using Logstash.

So my question is if I want to fetch data for a particular machine with in
a given time range, I can create a filter of that time range and also sort
it and fetch the data. I plan to use SCROLL to fetch the data however,
scroll does not support sorting which invariably leads to the question how
do i fetch the data in the sorted order based on timestamp?

I apologize if this question is already answered.

thanks

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.