ES jaeger analytical queries

jaeger-analytical-queries.md

top services

POST http://{{es}}/jaeger-span-2018-03-15/_search

{
 "size": 0,
 "aggs": {
  "uniq_host": {
  "terms": {
  "field": "process.serviceName",
  "size": 500
  }
  }
 }
}

top operations for an app

POST http://{{es}}/jaeger-span-2018-03-15/_search

{
 "size": 0,
 "aggs": {
	"uniq_host": {
		"terms": {
			"field": "operationName",
			"size": 500
	}
  }
 },
 "query": {
    "bool": {
      "must": [
	    {"term": { "process.serviceName": "sales-butler" }}
	  ]
    }
 }
}

filter post spans for an app

POST http://{{es}}/jaeger-span-2018-03-15/_search

{
  "query": {
    "bool": {
      "must": [
        {"match": {"process.serviceName": {"query": "user-history"}}},
        {
          "nested": {
            "path": "tags",
            "query": {
              "bool": {
                "must": [
                  {"match": {"tags.key": {"query": "http.method"}}},
                  {"match": {"tags.value": {"query": "POST"}}}
                ]
              }
            }
          }
        }
      ]
    }
  },
  "size": 10
}

top post operations

POST http://{{es}}/jaeger-span-2018-03-12/_search

{
 "size": 0,
 "aggs": {
	"uniq_host": {
		"terms": {
			"field": "operationName",
			"size": 500
	}
  }
 },
 "query": {
    "bool": {
      "must": [
	    {"term": { "process.serviceName": "user-history" }},
         {
          "nested": {
            "path": "tags",
            "query": {
              "bool": {
                "must": [
                  {"match": {"tags.key": {"query": "http.method"}}},
                  {"match": {"tags.value": {"query": "POST"}}}
                ]
              }
            }
          }
        }
	  ]
    }
 }
}

(DANGER) delete healthchecks

POST http://{{es}}/jaeger-span-2018-03-16/_delete_by_query

{
  "query": {
    "bool": {
      "must": [
        {"match": {"process.serviceName": {"query": "beta-conflux-integrations"}}},
        {
          "nested": {
            "path": "tags",
            "query": {
              "bool": {
                "must": [
                  {"match": {"tags.key": {"query": "http.path"}}},
                  {"match": {"tags.value": {"query": "/health"}}}
                ]
              }
            }
          }
        }
      ]
    }
  }
}