- Abstract - Addcoltotals - Anomalies - Append - Audit - Bucketdir - Cluster - Correlate - Delta - Erex
Main- Where all the processed data is stored. Internal- It stores internal logs and processed metrics. Audit- As the term suggests, this index stores events related to the file system, user history and audit.
– Identify the average duration of a user session on your website. – Track the progress of a customer order from start to finish. – Monitor the performance of a business process, such as the order fulfillment process. – Investigate a security incident by correlating events from different logs. – Troubleshoot a system problem by identifying the events that led up to the problem.
– Calculating the duration of each transaction – Identifying the start and end times of each transaction – Counting the number of events in each transaction – Searching for specific events within each transaction – Correlating events from different transaction