Skip to content
This repository has been archived by the owner on Nov 22, 2017. It is now read-only.

complex Queries in kibana or quering for different values of a single field type #420

Open
PalakGautam opened this issue Feb 6, 2014 · 0 comments

Comments

@PalakGautam
Copy link

I have successfully installed Logstash ,Elasticsearch and Kibana. All the links or documents i read have simple query syntax like search by text,by typing phrase or putting logical operators .but all this is so basic. How can we query in detail.for example i have logs of my magento store and the logs have time stamp,product ID and the "action" that states that if the product is purchased or viewed or removed or added to the cart like that.

I imported these logs in kibana via logstash.

Now i want to query logs for the "action" field not different fields.When i query the logs it returns me logs that have "added" value as action and logs that have "remove" action.The query is "added" OR "removed" it gives me all logs that contain these as actions. when i do "added" AND "removed" there are no logs given because these both words are of same field type that is "action "and kibana does not allow this it returns zero records because any particular log cant have two values in the action field that is product added and removed.I need to know the product which is added and removed the most by people that it gives me product that has been in added and removed logs and do a visualization of that.

please suggest if there are any tutorial for studying kibana lik, how to configure it learn to write complex queries.Can kibana support that result of query can be stored in json format and then this result can be queried again. or elastic search queries can be given as input to kibana and kibana creates visualization of that

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant