Kibana Timestamp Search

Elastic Stack Elasticsearch
5

  1. Yes you are correct, I have an alias name logs pointing to logs-2016.10.[1-30] and I have simply used logs as the patten in Kibana.

  2. On kibana, it just queries against the alias with the start and end timestamp in millis which corresponds correctly to the filter I select lets say 24 hour.

  3. I see the different indexes query in the ES logs. Its querying indexes which it shouldn't.