Skip to content

Instantly share code, notes, and snippets.

@kylebrandt
Last active March 3, 2016 00:25
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save kylebrandt/91bd77288bdd526fa7df to your computer and use it in GitHub Desktop.
Save kylebrandt/91bd77288bdd526fa7df to your computer and use it in GitHub Desktop.
Bosun Elastic Expression Query Example, Per Minute
$minute = 5
$bucketSize = "${minute}m"
$index = esls("logstash")
$keyField = "logsource"
$filter = esquery("message", "scollector")
escount($index, $keyField, $filter, $bucketSize, "1d", "") / $minute
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment