All Projects → brunotm → Elasticsplunk

brunotm / Elasticsplunk

Licence: other
A Search command to explore Elasticsearch data within Splunk.

Programming Languages

python
139335 projects - #7 most used programming language

Projects that are alternatives of or similar to Elasticsplunk

Docker Rails
Dockerize Rails 6 with ActionCable, Webpacker, Stimulus, Elasticsearch, Sidekiq
Stars: ✭ 856 (+2345.71%)
Mutual labels:  elasticsearch
Laravel Scout Elastic
Elastic Driver for Laravel Scout
Stars: ✭ 886 (+2431.43%)
Mutual labels:  elasticsearch
Elastic Graph Recommender
Building recommenders with Elastic Graph!
Stars: ✭ 33 (-5.71%)
Mutual labels:  elasticsearch
Python Kafka Elasticsearch
Simple learning project pushing CSV data into Kafka then indexing the data in ElasticSearch
Stars: ✭ 11 (-68.57%)
Mutual labels:  elasticsearch
Flexsearch
Next-Generation full text search library for Browser and Node.js
Stars: ✭ 8,108 (+23065.71%)
Mutual labels:  elasticsearch
Elasticsearch Java Rest
Elasticsearch Java Rest 手册
Stars: ✭ 27 (-22.86%)
Mutual labels:  elasticsearch
Elasticsearch Smalltalk
Elasticsearch for Pharo Smalltalk
Stars: ✭ 9 (-74.29%)
Mutual labels:  elasticsearch
Linux Tutorial
《Java 程序员眼中的 Linux》
Stars: ✭ 7,757 (+22062.86%)
Mutual labels:  elasticsearch
Angularcomponentplotly
Angular Component for Plotly, ASP.NET Core, Elasticsearch
Stars: ✭ 14 (-60%)
Mutual labels:  elasticsearch
Elastic data
Elasticsearch datasets ready for bulk loading
Stars: ✭ 30 (-14.29%)
Mutual labels:  elasticsearch
Office365 Management Api Elk
An API connector for the Office 365 Management API and the Elastic Stack
Stars: ✭ 13 (-62.86%)
Mutual labels:  elasticsearch
Apm Server
APM Server
Stars: ✭ 878 (+2408.57%)
Mutual labels:  elasticsearch
Hot Comment
Go、Gin、Elasticsearch开发的云音乐歌手、歌曲、评论搜索API,线上演示地址在右边:
Stars: ✭ 28 (-20%)
Mutual labels:  elasticsearch
Moqui Elasticsearch
Moqui Tool Component for ElasticSearch useful for scalable faceted text search, and analytics and reporting using aggregations and other great features
Stars: ✭ 10 (-71.43%)
Mutual labels:  elasticsearch
News Please
news-please - an integrated web crawler and information extractor for news that just works.
Stars: ✭ 969 (+2668.57%)
Mutual labels:  elasticsearch
Texcavator
Text mining on the Royal Library newspaper corpus
Stars: ✭ 9 (-74.29%)
Mutual labels:  elasticsearch
Movie Finder
오픈소스 검색엔진인 Elasticsearch 를 활용하여 '영화'를 검색을 하는 Vue.js 프로젝트
Stars: ✭ 21 (-40%)
Mutual labels:  elasticsearch
Diskover
File system crawler, disk space usage, file search engine and file system analytics powered by Elasticsearch
Stars: ✭ 977 (+2691.43%)
Mutual labels:  elasticsearch
3d kibana charts vis
3D Kibana Charts: Pie Chart, Bars Chart, Bubbles Chart
Stars: ✭ 34 (-2.86%)
Mutual labels:  elasticsearch
Rom Elasticsearch
Elasticsearch adapter for rom-rb
Stars: ✭ 30 (-14.29%)
Mutual labels:  elasticsearch

ElasticSplunk Search Command

A Search command to explore Elasticsearch data within Splunk.

Currently supported

  • Multiple node search
  • Index Specification
  • SSL connections
  • Scroll searches
  • Fields to include
  • Splunk timepicker values
  • Relative time values
  • Timestamp field specification
  • Index listing "action=indices-list"
  • Cluster health "action=cluster-health"

Included libraries

  • elasticsearch-py
  • urllib3
  • splunklib from the splunk-sdk-python

Examples

Search:

When searching with the ess command, it uses by default the Splunk timepicker provided time range unless the earliest and latest parameters are specified. When earliest and latest parameters are specified this will be the effective range for the search, even though the range below the search bar shows the one from the timepicker.

Using the Splunk timepicker provided time range

|ess eaddr="https://node1:9200,https://node2:9200" index=indexname tsfield="@timestamp" query="field:value AND host:host*"

Using the earliest and latest parameters

|ess eaddr="https://node1:9200,https://node2:9200" index=indexname tsfield="@timestamp" latest=now earliest="now-24h" query="field:value AND host:host*"

List indices

|ess eaddr="https://node1:9200,https://node2:9200" action=indices-list"

Cluster health

|ess eaddr="https://node1:9200,https://node2:9200" action=cluster-health"

Written by Bruno Moura [email protected]

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].