You can do this using the timestamp (with a range, and grow it if necessary) or if you have a serial ID of some sort on the log message you can do a range query on that
-- Itamar Syn-Hershko http://code972.com | @synhershko <https://twitter.com/synhershko> Freelance Developer & Consultant Author of RavenDB in Action <http://manning.com/synhershko/> On Mon, Aug 11, 2014 at 10:56 PM, Ran Davidovitz <[email protected]> wrote: > one big aspect of log analysis is to pinpoint a problematic event and than > see the surrounding events. > Is there a way to query for X number of event before and after the event ? > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/elasticsearch/aa97c0bb-9c7c-444b-8e70-c70e26e61552%40googlegroups.com > <https://groups.google.com/d/msgid/elasticsearch/aa97c0bb-9c7c-444b-8e70-c70e26e61552%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAHTr4Zuz0eUdDVU6EagCBc8ruk05xmiLFFCHeX7h3oAQAbQ3xA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
