Michelle Beard created SENSSOFT-302:
---------------------------------------
Summary: Create time-series index patter for UserALE in
Elasticsearch/Logstash
Key: SENSSOFT-302
URL: https://issues.apache.org/jira/browse/SENSSOFT-302
Project: SensSoft
Issue Type: Improvement
Reporter: Michelle Beard
We should not be feeding a constant stream of data to a single index. Ideally,
we should use this format when indexing userale logs:
%\{[@metadata][userale]}-%\{[@metadata][version]}-%\{+YYYY.MM.dd}"
%\{[@metadata][userale]} sets the first part of the index name to the value of
the userale metadata field, %\{[@metadata][version]} sets the second part to
userale's version, and %\{+YYYY.MM.dd} sets the third part of the name to a
date based on the Logstash @timestamp field. For
example:userale-1.0.0-2018.05.18.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)