Michelle Beard created SENSSOFT-302:
---------------------------------------

             Summary: Create time-series index patter for UserALE in 
Elasticsearch/Logstash
                 Key: SENSSOFT-302
                 URL: https://issues.apache.org/jira/browse/SENSSOFT-302
             Project: SensSoft
          Issue Type: Improvement
            Reporter: Michelle Beard


We should not be feeding a constant stream of data to a single index. Ideally, 
we should use this format when indexing userale logs:
%\{[@metadata][userale]}-%\{[@metadata][version]}-%\{+YYYY.MM.dd}"

%\{[@metadata][userale]} sets the first part of the index name to the value of 
the userale metadata field, %\{[@metadata][version]} sets the second part to 
userale's version, and %\{+YYYY.MM.dd} sets the third part of the name to a 
date based on the Logstash @timestamp field. For 
example:userale-1.0.0-2018.05.18.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to