aggregation Archives - Spoons Elastic

Categorize_text : better log alerts in elasticsearch

TL:DR New aggregation on unstructured (semi-structured) texts with the 7.16 Categorize logs for an alerte Better granularity for information message Build Better Alerts with the new aggregation of Elasticsearch We are working on an alerting system for one of Spoon Consulting clients on Elasticsearch. Client needs are very classical : Send an alert when I have more than 5 error logs within less than 10 min Know encountered errors Usually to do this I would have to build a query…

Paginating term aggregation

09/25/2020

Jérémy Gachet

Advanced Usage, Simple Elastic Usage, Spoon's Elastic posts

In Elasticsearch, paginating aggregations results is a recurring need.By default, Elastic will send all results in your aggregation. If a query filter is often enough, it’s not always the wanted behavior. First possibility, increase a lot the size parameter and do the pagination on front side.It can be a good solution… for few hundred results, and a low cardinality. But if we don’t want to crash our app, we probably can do better. Depending on your specific use case you will…