Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- elasticsearch [2025/03/28 18:13]
jango
+++ elasticsearch [2025/04/16 14:47] (aktuell)
jango
@@ Zeile 4: / Zeile 4: @@
 <code>
-"sort": [{ "@timestamp": "#SORT#" }]
+{
+    "query": {
+        "match_all": {}
+    },
+    "sort": [{ "@timestamp": "asc" }]
+}
+</code>
+<code>
+#Delete datastream
+curl -X DELETE "https://172.21.0.134:9200/_data_stream/test-vie-srv-ex01"
+# find all agents
+# windows
+curl -X GET "https://172.21.0.134:9200/winlogbeat-8.17.4/_search?pretty" --insecure -u "xxxxxxx:xxxxxx" -d "{\"size\":0,\"aggs\":{\"unique_agents\":{\"terms\":{\"field\":\"agent.name\",\"size\":10000}}}}" -H "Content-Type:application/json"
+# linux
+curl -X GET "https://172.21.0.134:9200/winlogbeat-8.17.4/_search?pretty" --insecure -u "xxxxxxx:xxxxxx" -d '{"size":0,"aggs":{"unique_agents":{"terms":{"field":"agent.name","size":10000}}}}' -H "Content-Type:application/json" | jq -r '.aggregations.unique_agents.buckets[] | "\(.key)"'
 </code>

MBCDN