Timestamp Search


(Rohit Varma) #1

I have daily indexes configured in ElasticSearch and an ALIAS which points to the last 7 days index.
In Kibana I have configured this Alias but whenever I search lets say last 24 hours its searching against all the Indexes present in that Alias.

Is it an expected behavior.

For e.g.

  1. I have an alias named logs pointing to indexes logs-2016.10.[1-30]
  2. Configured logs as the index pattern in Kibana.
  3. If i search for last 24 hours in Kibana, ES searches for all indexes in the alias instead of just searching 1 or at most 2 when I give last 24 hours.

(Mark Walkom) #2

Please don't cross post - Kibana Timestamp Search


(Mark Walkom) #3