I have such logic of logs aggregation.
My first service send events id:
'user-refresh-test', id: 117
Than other service send:
'user-refresh-test', id: 117, serviceN1: 1
It means than serviceN1 did some job and send 1 code.
This is Elasticsearch JSON
{
"_index": "logstash-2019.06.18-000001",
"_type": "_doc",
"_id": "115",
"_version": 4,
"_score": 1,
"_source": {
"creator": "notification-api",
"serviceN2": 1,
"id": 115,
"code": "user-refresh-test",
"ip": null,
"@version": "1",
"@timestamp": "2019-06-20T13:32:06.620Z",
"schedule": null,
"type": "rabbitmq",
"serviceN1": 1,
"serviceN3": 1
},
"fields": {
"@timestamp": [
"2019-06-20T13:32:06.620Z"
]
}
}
Now I have only log table
All services should did a job, otherwise I should know it and see it.
Is it possible to build some table which will have some color logic?
Or maybe I can did some filtering and see only lines with "-"