My setup includes using logstash 7.2.0 to fetch records from database and push to Elasticsearch.
I have a requirement to add new field to existing documents in an index plus index new documents with the new field via logstash.
I added the field in the jdbc query of logstash jdbc plugin and ran the logstash plugin.
It seems that the existing documents are getting deleted and recreated. I observed it by fetching count of records every 30 seconds.
Is this the expected behavior or am I missing something? pls help.