Is that Elastic way? [beginner question]


(Denis) #1

I’m newbie in Elastic and right now creating my first project.
I have an index where I store data from logstash. It storing devices metrics, and have device ID. Also I plan to create new index and store another data (data from third party service). I plan to create 3rd index where I will connect device ID and data from 2nd index, because I need aggregated data.

Is it right way to organise data in elastic? Can I in future make cross-indexes requests?

Thank you


(Scott Carr) #2

To make it easier to query across indexes, I would suggest having a prefix for the indexes you plan to query this way.

Something like:

uirobot_logstash-2018.01.31
uirobot_thirdpart-2018.01.31

That way you can easily query across indexes with:

uirobot_*

(Denis) #3

thank you


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.