I have a Log stream to ES indices that roll daily and i need to store 90 days of data.
How can i setup a dashboard that searches data from last two days. And then when needed extrapolate to old dates when needed.
Currently i have index pattern set to log* and dashboards takes few minutes to show up, and i believe it is searching across all indices even when it is looking for last hour data. i want to improve user experience with dashboards. Any help.