Parsing multiple time series into Elasticsearch

Elastic Stack Logstash
1

Dear all,
I am not sure if this belongs to logstash... please correct me if not.
I have some data that contains a field which is a time series, of interval 60sec. Should I map it into a single ES document, or should I expand it as a whole index, or is there any field types in ES to deal with this?
Any hints or help would be appreciated. :slight_smile:

An entry looks something like this:
... , timestamp, ... , 'loss': [-1, 0, 0, 0, 0, 0, 0, 0, 0, ...], 'latency': [-1, -1, -1, 0, 0, 0, 0, 0, 0, ...]

2

If there is a single timestamp in the doc, then treat it as a single event. Even if it spans an interval of time.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.