ElasticSearch - msearch

1

Hi All,

I’m evaluating Dremio as gateway solution to access our big and fast data repositories (Hive, Hbase and ElasticSearch)

Specifically for ElasticSearch, how can I query multiple indexes (same type of data, different indexes per day):

Example Index names:
webtraffic_2017-08-21
webtraffic_2017-08-22
webtraffic_2017-08-23
webtraffic_2017-08-24

A query like this doesn’t seem to work:

SELECT *
FROM “Network Analytics”.“webtraffic_2017*”.logs

Thanks in advance

BR
Alex

2

Hi Alex,

Are you getting an error?

3

You can create an alias on top of these indices, and then query the alias from Dremio.

4

We added a tutorial to help explain how this works in Dremio: https://www.dremio.com/tutorials/elasticsearch-sql-query-multiple-indexes/

Let us know if we’ve overlooked anything important.