created: 04/01/2019
updated: 09/03/2019


ESO Master Merchant data in ELK

elk-docker

docker pull sebp/elk
docker run -p 5601:5601 -p 9200:9200 -p 5044:5044 -it --name elk sebp/elk

Kibana misc.

  • filter for wildcarding against fields
{
  "query": {
    "query_string": {
      "analyze_wildcard": true,
      "fields": [
        "message"
      ],
      "lowercase_expanded_terms": false,
      "query": "*INFO*"
    }
  }
}
  • demonstration of how awesome Kibana can be…