I use Metricbeat with Logstash to process and send to my Elasticsearch cluster. I do performance testing in some equipment and I have to write down the start and end time of the test so I can go to Kibana and look for the time frame. But I was thinking it would be better if somehow if I add some sort of trigger or tag when my test is active and by the time I need to see the results I only need to look for that specific tag instead of looking for the machine, the time frame and the metrics.
I tried multiple things like use the http input in Logstash to send a start signal via aggregate filter to Logstash and start tagging all metrics coming from Metricbeat and APM then send another curl with stop action with aggregate filter and stop tagging. But it proved to be difficult just because I can't know when aggregate is active unless I would know somehow the task_id, as I can only know that at the start and end of the test. I also thought on metadata, but that only persists for every event.
Any idea how to tackle it?