3. こんな感じ select count(*) from accesslog:win(30sec ) group by path having count(*) > 5 output input { { count(*): 20, host: 10.1.1.1, path “/index.html” path : “/index.html”, } code: 200 { } count(*):6, path “/favicon.ico” } 5. Data Flow Query Registration Proces Compone Client(ruby) s nt RPC Client msgpack-RPC fluentd (ruby) Subscriber(java) query input 0mq publish 0mq Esper RPC output msgpack sub