Managing the life cycle of time series data

Most machine data sources can be characterized as time series data. Logs and metrics generally include a timestamp for recording when the event occurred or was observed. This type of data is generally not updated after it is ingested. Information changes are generally recorded as new events.

The following documents illustrate the append-only nature of time series data:

[
      {
          "sensor_name" : "living_room",
          "lights_on" : 1,
          "timestamp" : "2021-02-14T00:00:00.000Z"
      },
      {
          "sensor_name" : "living_room",
     ...