I am using Kibana dev tools to return all lines by using bellow Query in DEV tools, but instead of giving all matches, its gives only dates from when in installed this kibana.
GET filebeat-*/_search
{
"query": {
"match_all": {
}
}
}
but its only giving limited lines with date from when i installed elastic search i.e from 2019-07-29T04:57:04.118Z , but not recent.
{
"took" : 1,
"timed_out" : false,
"_shards" : {
"total" : 1,
"successful" : 1,
"skipped" : 0,
"failed" : 0
},
"hits" : {
"total" : {
"value" : 10000,
"relation" : "gte"
},
"max_score" : 1.0,
"hits" : [
{
"_index" : "filebeat-7.2.0-2019.07.27-000001",
"_type" : "_doc",
"_id" : "XOQWPGwBUSUoRIJv1eua",
"_score" : 1.0,
"_source" : {
"@timestamp" : "2019-07-29T04:57:04.118Z",
"log" : {
"offset" : 1404504,
"file" : {
"path" : "/root/root/standalone/log/test.log"
}
},
"input" : {
"type" : "log"
},
"message" : "04:57:03,425 TRACE [com.abc.jca.sockets.test] (default-threads - 5) MessageProcessor - ABC"
}
},
{
"_index" : "filebeat-7.2.0-2019.07.27-000001",
"_type" : "_doc",
"_id" : "XeQWPGwBUSUoRIJv1eua",
"_score" : 1.0,
"_source" : {
"@timestamp" : "2019-07-29T04:57:04.118Z",
"log" : {
"offset" : 1404669,
"file" : {
"path" : "/root/root/standalone/log/test.log"
}
},
"message" : "04:57:03,425 TRACE [com.ab.jca.sockets.abc] (default-threads - 5) MessageProcessor - ",
},
Do i need to pass any parameter to get all matches , specially if i want to get from todays log, how shall i pass it ?
Thanks