Deploying LOGIQ
INTEGRATIONS
LOGIQ Monitoring
Vewing Logs
COMPLIANCE
LOGIQ STREAMING
LOGIQ Configuration
Log Ingest configuration
Elasticsearch Data source
Elasticsearch data source provides a quick and flexible way to issue queries to one or more indexes in an Elasticsearch cluster
Create the Elasticsearch data source
The first step in to create the data source and provide the Elasticsearch cluster URL and optionally provide the basic auth
login and password.
Configuring the Elasticsearch data source
Writing queries
In the query editor view, select the Elasticsearch data source created above. On the left column, click on the refresh 
icon to refresh the schemas (indexes). The schemas are expandible and show the schema details.
Refresh and lookup Elasticsearch indexes
You can then proceed to the query editor and run the search query. The query uses JSON as passed to the Elasticsearch search API
Writing a search query against an Elasticsearch index
​
Last modified 1yr ago
Export as PDF
Copy link