3. こんな感じ select count(*) from accesslog:win(30sec ) group by path having count(*) > 5 output input { { count(*): 20, host: 10.1.1.1, path “/index.html” path : “/index.html”, } code: 200 { } count(*):6, path “/favicon.ico” } 5. Data Flow Query Registration Proces Compone Client(ruby) s nt RPC Client msgpack-RPC fluentd (ruby) Subscriber(java) query input 0mq publish 0mq Esper RPC output msgpack sub
![20130215 fluentd esper_2](https://cdn-ak-scissors.b.st-hatena.com/image/square/179971acbaa22079a723f425976770cbce1cfece/height=288;version=1;width=512/https%3A%2F%2Fcdn.slidesharecdn.com%2Fss_thumbnails%2F20130215fluentdesper2-130219063831-phpapp02-thumbnail.jpg%3Fwidth%3D640%26height%3D640%26fit%3Dbounds)