North Dallas Developers Online Curricula

Easy Query

Kibana:

Mozilla

Query:

GET kibana_sample_data_logs/_search
{
  "query": {
    "bool": {
      "must": [
        { "multi_match": 
          { "query": "Mozilla" }
        }
      ]
    }
  }
}

Range Query

Kibana:

Mozilla

Query:

GET kibana_sample_data_logs/_search
{
  "query": {
    "bool": {
      "must": [
        { "multi_match": 
          { "query": "Mozilla" }
        },
        {
          "range" : {
            "timestamp" : {
                "gte": "2019-04-28T00:00:00",
                "lt": "2019-05-01T00:00:00",
                "time_zone": "-05:00"
            }
          }
        }
      ]
    }
  }
}

Task: Search for “error”

Basic “And” Query

Kibana:

error && osx

Query:

GET kibana_sample_data_logs/_search
{
  "query": {
    "bool": {
      "must": [
        { "multi_match": 
          { "query": "error" }
        },
        { "multi_match": 
          { "query": "osx" }
        },
        {
          "range" : {
            "timestamp" : {
                "gte": "2019-04-28T00:00:00",
                "lt": "2019-05-01T00:00:00",
                "time_zone": "-05:00"
            }
          }
        }
      ]
    }
  }
}

Task: Search for 503 response and security tag (4 min)

Screencast

Screencast going over these exercises.