Sliding Window Query in Elastic

Hello, I have a log message which has an id, and it will be same for repeating requests. So I need to find repetitive requests from same id in a certain interval(ex:15min) , What would be the easiest way to achieve this, It should be based on sliding window?
Ex:
message: Id= 1
Time:10:00
message: Id= 1
Time:10: 05
message: Id=2
Time:10: 07
message: Id= 2
Time: 10:12
message: Id= 2
Time:10: 24
message: Id= 3
Time: 10:30
message: Id= 3
Time: 11:00
Output
id: 1 Count: 1
id: 2 Count: 2
id: 3 Count: 0
Output Based on sliding window for 15 min interval
First Id repeated once between 10 and 10:15, second Id repeated once between 10 and 10:15, and second time between 10:10 and 10:25, if we had considered fixed interval instead of sliding window, then we will get 2 different counts with 1 each between 10 to 10:15 and 10:15 and 10:30, and user id 3 didn't repeat in any 15 min interval window, so it's 0

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.