I have a website and an api who send logs to Elasticsearch. When an error occur on the website or the api, i would like to see every logs (website and api) of my user before that error (with kibana) by putting the user id in the search bar.
I tried to use Data Table and scripts but i didn't manage to achieve what i want and i really want to avoid to write a plugin. In my logs, i have the group id, the user id and the session id. I used these in the scripts and Data table.
Can you guide me please ?