A new way to build Trending filters using Elasticsearch
secalerts.co
1 thread
I haven't seen this approach after researching ways to implement a "Trending" query. We get super fast queries over an arbitrary time window at the cost of a slower but highly cacheable threshold calculation query.