LogStack - Help with elasticsearch as data source

prsolucoes · November 14, 2015, 4:42am

Hi people,

Im trying making a datasource using elasticsearch with my tool LogStack (https://github.com/prsolucoes/logstack/). But after try a lot i have one method that i dont know how to do solve the problem.

This is the file:

github.com

prsolucoes/logstack/blob/master/datasource/elasticsearch.go

package datasource

import (
	"encoding/json"
	"errors"
	"fmt"
	"github.com/prsolucoes/logstack/models/domain"
	"gopkg.in/ini.v1"
	"gopkg.in/olivere/elastic.v3"
	"time"
)

type ElasticSearchDataSource struct {
	Client *elastic.Client
	Host   string
	Index  string
	Type   string
}

func (This *ElasticSearchDataSource) Name() string {

This file has been truncated. show original

Method:
LogList

This method need make a simple search wih some conditions:
1 - all logs need be retrieved by a token
2 - if message is empty, the search need be greater than date parameter
3 - if message is not empty, the search need contains the message (like a like sql command)

I try made it in my current class above, but not success

Can anyone help me with it? Thanks.

magnusbaeck · November 14, 2015, 2:27pm

What's the problem, specifically? Is the query returning an error? Since you're throwing away the query results I figure the problem isn't that you don't get the result you expected.

prsolucoes · November 16, 2015, 11:17am

It dont return results. I dont know if my query is correct.

magnusbaeck · November 16, 2015, 12:11pm

But how can you say that it's not returning any results when you're not looking at the results? With

_, err := This.Client.Search().Index(This.Index).Query(query).Do()

you're throwing them away and only keeping the error.

If you want help please be specific. Does the line above return any results or not? Or does it return an error? What if you try the simplest possible query to help rule out that it's your query that's incorrect? Verify the correctness of whatever query you try with e.g. curl or Sense.

prsolucoes · November 17, 2015, 3:07pm

The current code is in this way because i need compile and push the code. So to avoid the unused variable warning i need use the "_". So ignore it, the code was "results, error := ...". This is not the problem, i only forgot explain it.