Possible to only find new entries since last search?

Dear all =)

Does anyone know if it is possible to make a query that searched for error_event:1 and the next time I run it, it only shows the new entries since last search?

Sandra =)

Only if you track the time of the last document in your client, there's nothing in Elasticsearch to do that.

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.