Hi:
     I use a very simple query to search a index which is last day and has no documents income. but I got
 a different hits total , I don't know why?

The query:
```
GET app-wechat-2018.04.16/_search?preference=_primary
  {
    "query": {
         "match": {
            "message": "maidian"
        }
       
    }
}
```
one result:

```
{
  "took": 76,
  "timed_out": false,
  "_shards": {
    "total": 5,
    "successful": 5,
    "failed": 0
  },
  "hits": {
    "total": 29579,
    "max_score": 4.108034,
    "hits": [
      {
        "_index": "app-wechat-2018.04.16",
        "_type": "app",
        "_id": "AWLLw-xdv1eGfmvVhTgH",
        "_score": 4.108034,
        "_source": {
          "log_type": "app",
          "@timestamp": "2018-04-16T00:03:21.263Z",
          "ip": "10.125.70.26",
          "beat": {},
          "@version": "1",
          "name": "wechat",
          "source": "/home/finance/Logs/wechat.msxf.lo/log-2018-04-16.log",
          "tag": "log-2018-04-16",
          "message": """2018-04-16 08:03:21.007 [INFO] dateFileLog - {"maidian":"maidianp","usr_id":"6033147","union_id":"133a72633f884c74950be71f820f6d8b","open_id":"o9NCRv2Svm1PUxenZ8EunVB-9HNQ","appl_termn":"WeChat","appl_no":"870682478958874632","prod_cd":"1101","page_id":"htsb","last_page_id":"yxzl","next_page_id":"szmm","entr_tm":"2018-04-16 08:03:20.998","leave_tm":"","usr_reg_tm":"","partner_type":"","partner_ver":"","app_chan":"","app_pkg":"","os_ver":"","device_uniq_id":"","device_md":"","device_gps":"","device_ip":""}""",
          "type": "app"
        }
      },
      {
...
```
another result:
```
{
  "took": 3,
  "timed_out": false,
  "_shards": {
    "total": 5,
    "successful": 5,
    "failed": 0
  },
  "hits": {
    "total": 29582,
    "max_score": 4.1081295,
    "hits": [
      {
        "_index": "app-wechat-2018.04.16",
        "_type": "app",
        "_id": "AWLLw-xdv1eGfmvVhTgH",
        "_score": 4.1081295,
        "_source": {
          "log_type": "app",
          "@timestamp": "2018-04-16T00:03:21.263Z",
          "ip": "10.125.70.26",
          "beat": {},
          "@version": "1",
          "name": "wechat",
          "source": "/home/finance/Logs/wechat.msxf.lo/log-2018-04-16.log",
          "tag": "log-2018-04-16",
          "message": """2018-04-16 08:03:21.007 [INFO] dateFileLog - {"maidian":"maidianp","usr_id":"6033147","union_id":"133a72633f884c74950be71f820f6d8b","open_id":"o9NCRv2Svm1PUxenZ8EunVB-9HNQ","appl_termn":"WeChat","appl_no":"870682478958874632","prod_cd":"1101","page_id":"htsb","last_page_id":"yxzl","next_page_id":"szmm","entr_tm":"2018-04-16 08:03:20.998","leave_tm":"","usr_reg_tm":"","partner_type":"","partner_ver":"","app_chan":"","app_pkg":"","os_ver":"","device_uniq_id":"","device_md":"","device_gps":"","device_ip":""}""",
          "type": "app"
        }
      },
```

---
NEW: Monitor These Apps!
elasticsearch, apache solr, apache hbase, hadoop, redis, casssandra, amazon cloudwatch, mysql, memcached, apache kafka, apache zookeeper, apache storm, ubuntu, centOS, red hat, debian, puppet labs, java, senseiDB