CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

tighten up search timeframe

Browse Source
This commit is contained in:
reyesj2
2025-06-02 16:31:26 -05:00
parent 061600fa7a
commit 6238a5b3ed
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
salt/elasticsearch/tools/sbin/so-elasticsearch-index-growth
View File

@@ -74,7 +74,7 @@ for index in $indexes; do
size_24h_ago=${size_24h_ago:-$current_size} size_24h_ago=${size_24h_ago:-$current_size}
size_7d_query="from(bucket: \"telegraf/so_long_term\") size_7d_query="from(bucket: \"telegraf/so_long_term\")
|> range(start: -8d, stop: -6d) |> range(start: -7d8h, stop: -7d)
|> filter(fn: (r) => r._measurement == \"elasticsearch_index_size\" and r._field == \"$index\") |> filter(fn: (r) => r._measurement == \"elasticsearch_index_size\" and r._field == \"$index\")
|> last() |> last()
|> keep(columns: [\"_value\"])" |> keep(columns: [\"_value\"])"
@@ -83,7 +83,7 @@ for index in $indexes; do
size_7d_ago=${size_7d_ago:-$current_size} size_7d_ago=${size_7d_ago:-$current_size}
size_30d_query="from(bucket: \"telegraf/so_long_term\") size_30d_query="from(bucket: \"telegraf/so_long_term\")
|> range(start: -31d, stop: -29d) |> range(start: -30d8h, stop: -30d)
|> filter(fn: (r) => r._measurement == \"elasticsearch_index_size\" and r._field == \"$index\") |> filter(fn: (r) => r._measurement == \"elasticsearch_index_size\" and r._field == \"$index\")
|> last() |> last()
|> keep(columns: [\"_value\"])" |> keep(columns: [\"_value\"])"