Working with rollup indices

The rollup feature in Elasticsearch enables you to summarize historical data and store it compactly for future analysis, so you can query, aggregate, and visualize the data using a fraction of the storage. This is a good way to keep costs down when you need to store months or years of historical data for use in visualizations and reports.

Kibana supports rolled up data in two ways:

  • You can create and manage a rollup job in Management
  • You can create a visualization using rolled up data in Visualize and view it in a dashboard