Is that Elastic way? [beginner question]

Elastic Stack Elasticsearch
1

I’m newbie in Elastic and right now creating my first project.
I have an index where I store data from logstash. It storing devices metrics, and have device ID. Also I plan to create new index and store another data (data from third party service). I plan to create 3rd index where I will connect device ID and data from 2nd index, because I need aggregated data.

Is it right way to organise data in elastic? Can I in future make cross-indexes requests?

Thank you

2

To make it easier to query across indexes, I would suggest having a prefix for the indexes you plan to query this way.

Something like:

uirobot_logstash-2018.01.31
uirobot_thirdpart-2018.01.31

That way you can easily query across indexes with:

uirobot_*
1 Like
3

thank you

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.