2017-04-11 21:52:47 -04:00
|
|
|
//lcawley Verified example output 2017-04
|
2017-04-04 18:26:39 -04:00
|
|
|
[[ml-update-datafeed]]
|
2017-05-02 15:45:42 -04:00
|
|
|
==== Update {dfeeds-cap}
|
2017-04-04 18:26:39 -04:00
|
|
|
|
2017-05-02 15:45:42 -04:00
|
|
|
The update {dfeed} API enables you to update certain properties of a {dfeed}.
|
2017-04-04 18:26:39 -04:00
|
|
|
|
|
|
|
===== Request
|
|
|
|
|
|
|
|
`POST _xpack/ml/datafeeds/<feed_id>/_update`
|
|
|
|
|
2017-04-25 17:08:29 -04:00
|
|
|
//===== Description
|
2017-04-18 18:13:21 -04:00
|
|
|
|
2017-04-04 18:26:39 -04:00
|
|
|
===== Path Parameters
|
|
|
|
|
|
|
|
`feed_id` (required)::
|
2017-05-02 15:45:42 -04:00
|
|
|
(string) Identifier for the {dfeed}
|
2017-04-04 18:26:39 -04:00
|
|
|
|
|
|
|
===== Request Body
|
|
|
|
|
2017-05-02 15:45:42 -04:00
|
|
|
The following properties can be updated after the {dfeed} is created:
|
2017-04-10 11:59:27 -04:00
|
|
|
|
2017-04-11 21:52:47 -04:00
|
|
|
`aggregations`::
|
2017-05-02 15:45:42 -04:00
|
|
|
(object) If set, the {dfeed} performs aggregation searches.
|
2017-04-26 14:18:51 -04:00
|
|
|
For more information, see <<ml-datafeed-resource>>.
|
2017-04-11 21:52:47 -04:00
|
|
|
|
|
|
|
`chunking_config`::
|
2017-04-27 14:17:06 -04:00
|
|
|
(object) Specifies how data searches are split into time chunks.
|
|
|
|
See <<ml-datafeed-chunking-config>>.
|
2017-04-04 18:26:39 -04:00
|
|
|
|
2017-04-11 21:52:47 -04:00
|
|
|
`frequency`::
|
2017-05-02 15:45:42 -04:00
|
|
|
(time units) The interval at which scheduled queries are made while the
|
|
|
|
{dfeed} runs in real time. The default value is either the bucket span for short
|
2017-04-26 14:18:51 -04:00
|
|
|
bucket spans, or, for longer bucket spans, a sensible fraction of the bucket
|
|
|
|
span. For example: "150s".
|
2017-04-04 18:26:39 -04:00
|
|
|
|
2017-04-11 21:52:47 -04:00
|
|
|
`indexes` (required)::
|
2017-04-26 14:18:51 -04:00
|
|
|
(array) An array of index names. For example: ["it_ops_metrics"].
|
2017-04-04 18:26:39 -04:00
|
|
|
|
2017-04-11 21:52:47 -04:00
|
|
|
`job_id`::
|
2017-04-11 22:26:18 -04:00
|
|
|
(string) A numerical character string that uniquely identifies the job.
|
2017-04-04 18:26:39 -04:00
|
|
|
|
2017-04-11 21:52:47 -04:00
|
|
|
`query`::
|
2017-04-27 14:17:06 -04:00
|
|
|
(object) The {es} query domain-specific language (DSL). This value
|
|
|
|
corresponds to the query object in an {es} search POST body. All the
|
|
|
|
options that are supported by {es} can be used, as this object is
|
|
|
|
passed verbatim to {es}. By default, this property has the following
|
|
|
|
value: `{"match_all": {"boost": 1}}`.
|
2017-04-04 18:26:39 -04:00
|
|
|
|
2017-04-11 21:52:47 -04:00
|
|
|
`query_delay`::
|
2017-04-26 14:18:51 -04:00
|
|
|
(time units) The number of seconds behind real-time that data is queried. For
|
2017-04-27 14:17:06 -04:00
|
|
|
example, if data from 10:04 a.m. might not be searchable in {es} until
|
|
|
|
10:06 a.m., set this property to 120 seconds. The default value is `60s`.
|
2017-04-04 18:26:39 -04:00
|
|
|
|
2017-04-11 21:52:47 -04:00
|
|
|
`scroll_size`::
|
2017-04-27 14:17:06 -04:00
|
|
|
(unsigned integer) The `size` parameter that is used in {es} searches.
|
2017-04-26 14:18:51 -04:00
|
|
|
The default value is `1000`.
|
2017-04-10 11:59:27 -04:00
|
|
|
|
2017-04-11 21:52:47 -04:00
|
|
|
`types` (required)::
|
2017-04-26 14:18:51 -04:00
|
|
|
(array) A list of types to search for within the specified indices.
|
|
|
|
For example: ["network","sql","kpi"].
|
2017-04-10 11:59:27 -04:00
|
|
|
|
|
|
|
For more information about these properties,
|
2017-05-02 15:45:42 -04:00
|
|
|
see <<ml-datafeed-resource>>.
|
2017-04-10 11:59:27 -04:00
|
|
|
|
2017-04-04 18:26:39 -04:00
|
|
|
|
2017-04-25 17:08:29 -04:00
|
|
|
===== Authorization
|
|
|
|
|
|
|
|
You must have `manage_ml`, or `manage` cluster privileges to use this API.
|
|
|
|
For more information, see <<privileges-list-cluster>>.
|
2017-04-10 11:59:27 -04:00
|
|
|
|
2017-04-04 18:26:39 -04:00
|
|
|
===== Examples
|
|
|
|
|
2017-05-02 15:45:42 -04:00
|
|
|
The following example updates the `datafeed-it-ops-kpi` {dfeed}:
|
2017-04-04 18:26:39 -04:00
|
|
|
|
|
|
|
[source,js]
|
|
|
|
--------------------------------------------------
|
2017-04-11 21:52:47 -04:00
|
|
|
POST _xpack/ml/datafeeds/datafeed-it-ops-kpi/_update
|
2017-04-04 18:26:39 -04:00
|
|
|
{
|
2017-04-11 21:52:47 -04:00
|
|
|
"query_delay": "60s",
|
|
|
|
"frequency": "150s",
|
2017-04-10 11:59:27 -04:00
|
|
|
"aggregations": {
|
2017-04-11 21:52:47 -04:00
|
|
|
"buckets": {
|
|
|
|
"date_histogram": {
|
|
|
|
"field": "@timestamp",
|
|
|
|
"interval": 30000,
|
|
|
|
"offset": 0,
|
|
|
|
"order": {
|
|
|
|
"_key": "asc"
|
|
|
|
},
|
|
|
|
"keyed": false,
|
|
|
|
"min_doc_count": 0
|
|
|
|
},
|
|
|
|
"aggregations": {
|
|
|
|
"events_per_min": {
|
|
|
|
"sum": {
|
|
|
|
"field": "events_per_min"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"@timestamp": {
|
|
|
|
"max": {
|
|
|
|
"field": "@timestamp"
|
|
|
|
}
|
|
|
|
}
|
2017-04-10 11:59:27 -04:00
|
|
|
}
|
|
|
|
}
|
2017-04-11 21:52:47 -04:00
|
|
|
},
|
|
|
|
"scroll_size": 1000,
|
|
|
|
"chunking_config": {
|
|
|
|
"mode": "manual",
|
|
|
|
"time_span": "30000000ms"
|
|
|
|
}
|
2017-04-04 18:26:39 -04:00
|
|
|
}
|
|
|
|
--------------------------------------------------
|
|
|
|
// CONSOLE
|
|
|
|
// TEST[skip:todo]
|
|
|
|
|
2017-05-02 15:45:42 -04:00
|
|
|
When the {dfeed} is updated, you receive the following results:
|
2017-04-21 11:23:27 -04:00
|
|
|
[source,js]
|
2017-04-04 18:26:39 -04:00
|
|
|
----
|
|
|
|
{
|
2017-04-10 11:59:27 -04:00
|
|
|
"datafeed_id": "datafeed-it-ops-kpi",
|
2017-04-04 18:26:39 -04:00
|
|
|
"job_id": "it-ops-kpi",
|
2017-04-11 21:52:47 -04:00
|
|
|
"query_delay": "60s",
|
|
|
|
"frequency": "150s",
|
|
|
|
...
|
2017-04-10 11:59:27 -04:00
|
|
|
"aggregations": {
|
2017-04-11 21:52:47 -04:00
|
|
|
"buckets": {
|
|
|
|
"date_histogram": {
|
2017-04-10 11:59:27 -04:00
|
|
|
"field": "@timestamp",
|
|
|
|
"interval": 30000,
|
|
|
|
"offset": 0,
|
|
|
|
"order": {
|
|
|
|
"_key": "asc"
|
|
|
|
},
|
|
|
|
"keyed": false,
|
|
|
|
"min_doc_count": 0
|
|
|
|
},
|
|
|
|
"aggregations": {
|
|
|
|
"events_per_min": {
|
|
|
|
"sum": {
|
|
|
|
"field": "events_per_min"
|
|
|
|
}
|
2017-04-11 21:52:47 -04:00
|
|
|
},
|
|
|
|
"@timestamp": {
|
|
|
|
"max": {
|
|
|
|
"field": "@timestamp"
|
|
|
|
}
|
2017-04-10 11:59:27 -04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
2017-04-11 21:52:47 -04:00
|
|
|
"scroll_size": 1000,
|
|
|
|
"chunking_config": {
|
|
|
|
"mode": "manual",
|
|
|
|
"time_span": "30000000ms"
|
|
|
|
}
|
2017-04-04 18:26:39 -04:00
|
|
|
}
|
|
|
|
----
|