Query elasticsearch directly

Graylog Central (peer support)
1

Hi all,

Is it possible to query elasticsearch directly via HTTP verb? Also, I’m not sure how to find the elasticsearch endpoint.
i.e.

POST /products/_doc
{
  "name": "Coffee Maker",
  "price": 64,
  "in_stock": 10
}

OR

GET /products/_doc/101

2

Hello @syntax, welcome!

This topic is more suited for the Elastic forums. Here are some links to help you get started:

1 Like
3

hi @ttsandrew .
thanks for the reply.

i think i wasn’t very clear on my question.
how do i find elasticsearch endpoint & query based on graylog installation?
right now, i only know the graylog endpoint.

4

What information are you trying to retrieve from Elasticsearch?

5

actually my intention is to see if i can perform elasticsearch query operations independently from graylog.
this is so that if i ever need to build kibana/grafana, i can query data directly from elasticsearch.

6

You can, but the best resource for that is the Elastic forums. There is nothing special about the way that Elasticsearch is used with Graylog. The API reference I linked above will help you find the information you need. There is also information here about getting information about Elasticsearch from the Graylog REST API, or some limited examples for interacting with Elasticsearch directly.

https://docs.graylog.org/en/4.0/pages/configuration/elasticsearch.html

7

Oh. I realized I could directly curl http://ip_address:9200/_cat/shards the same way I do on elasticsearch.
I initially thought elasticsearch had a different endpoint when installing with graylog.

Thanks so much for your help

1 Like
8

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.