{"action":"created","issue":{"url":"https://api.github.com/repos/elastic/kibana/issues/275","labels_url":"https://api.github.com/repos/elastic/kibana/issues/275/labels{/name}","comments_url":"https://api.github.com/repos/elastic/kibana/issues/275/comments","events_url":"https://api.github.com/repos/elastic/kibana/issues/275/events","html_url":"https://github.com/elastic/kibana/issues/275","id":17201233,"number":275,"title":"Extract log event context","user":{"login":"mrdavidlaing","id":227505,"avatar_url":"https://avatars.githubusercontent.com/u/227505?v=3","gravatar_id":"","url":"https://api.github.com/users/mrdavidlaing","html_url":"https://github.com/mrdavidlaing","followers_url":"https://api.github.com/users/mrdavidlaing/followers","following_url":"https://api.github.com/users/mrdavidlaing/following{/other_user}","gists_url":"https://api.github.com/users/mrdavidlaing/gists{/gist_id}","starred_url":"https://api.github.com/users/mrdavidlaing/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mrdavidlaing/subscriptions","organizations_url":"https://api.github.com/users/mrdavidlaing/orgs","repos_url":"https://api.github.com/users/mrdavidlaing/repos","events_url":"https://api.github.com/users/mrdavidlaing/events{/privacy}","received_events_url":"https://api.github.com/users/mrdavidlaing/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/elastic/kibana/labels/4.2.0","name":"4.2.0","color":"ffffff"},{"url":"https://api.github.com/repos/elastic/kibana/labels/enhancement","name":"enhancement","color":"009800"},{"url":"https://api.github.com/repos/elastic/kibana/labels/roadmap","name":"roadmap","color":"fbca04"}],"state":"open","locked":false,"assignee":{"login":"rashidkpc","id":1250387,"avatar_url":"https://avatars.githubusercontent.com/u/1250387?v=3","gravatar_id":"","url":"https://api.github.com/users/rashidkpc","html_url":"https://github.com/rashidkpc","followers_url":"https://api.github.com/users/rashidkpc/followers","following_url":"https://api.github.com/users/rashidkpc/following{/other_user}","gists_url":"https://api.github.com/users/rashidkpc/gists{/gist_id}","starred_url":"https://api.github.com/users/rashidkpc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rashidkpc/subscriptions","organizations_url":"https://api.github.com/users/rashidkpc/orgs","repos_url":"https://api.github.com/users/rashidkpc/repos","events_url":"https://api.github.com/users/rashidkpc/events{/privacy}","received_events_url":"https://api.github.com/users/rashidkpc/received_events","type":"User","site_admin":false},"milestone":null,"comments":48,"created_at":"2013-07-25T09:19:27Z","updated_at":"2015-06-04T21:00:15Z","closed_at":null,"body":"When troubleshooting the cause of an ERROR log event, its really helpful to be able to see the log event context - i.e, which, say, 10 log events occured before and after the specific ERROR log event.\r\n\r\nLoggly has a feature which does this quite nicely, as illustrated below\r\n![capture](https://f.cloud.github.com/assets/227505/854639/fd7c953e-f50a-11e2-9637-eecae9900435.PNG)\r\n\r\nI have 2 questions concerning this:\r\n\r\n1.  Is it feasible to add a similar feature to Kibana?\r\n2.  Are there any existing plans to add said feature?  (I'm happy to contribute development resources to assist or lead this if its possible)\r\n\r\nLastly, thanks!"},"comment":{"url":"https://api.github.com/repos/elastic/kibana/issues/comments/109049114","html_url":"https://github.com/elastic/kibana/issues/275#issuecomment-109049114","issue_url":"https://api.github.com/repos/elastic/kibana/issues/275","id":109049114,"user":{"login":"DKlotz-APS","id":8920698,"avatar_url":"https://avatars.githubusercontent.com/u/8920698?v=3","gravatar_id":"","url":"https://api.github.com/users/DKlotz-APS","html_url":"https://github.com/DKlotz-APS","followers_url":"https://api.github.com/users/DKlotz-APS/followers","following_url":"https://api.github.com/users/DKlotz-APS/following{/other_user}","gists_url":"https://api.github.com/users/DKlotz-APS/gists{/gist_id}","starred_url":"https://api.github.com/users/DKlotz-APS/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DKlotz-APS/subscriptions","organizations_url":"https://api.github.com/users/DKlotz-APS/orgs","repos_url":"https://api.github.com/users/DKlotz-APS/repos","events_url":"https://api.github.com/users/DKlotz-APS/events{/privacy}","received_events_url":"https://api.github.com/users/DKlotz-APS/received_events","type":"User","site_admin":false},"created_at":"2015-06-04T21:00:15Z","updated_at":"2015-06-04T21:00:15Z","body":"I think both are useful; I use this to aggregate logs on load balanced nodes so the \"whole picture\" can be important too since an event can span multiple instances. that being said, computername could also be another field like the underlying platform or cluster as I expand the use case to more than one piece of software/cluster type."}}