Periodically run elasticsearch query count only new records

Elastic Stack Logstash
1

Hi,

I'm in need of a running an elasticsearch query periodically, every minute or so, and return a count that is based on new records since the last time the query was executed.

I tried the "http_poller" input plugin however it doesn't support the ability to store the last timestamp to then filter by, could someone please provide a solution I could try.

Thanks,
E

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.