Aggregate filter plugin events not adding to elasticsearch index

For the task id i'm taking user.id not id.

No, it wont be same, because in the finger print it also has log_id, which is unique.
And i also tried removing document_id from output conf, still aggregate events not getting added.

I don't see any deletions, attached stats please let me know if you find anything .

Blockquote
"primaries": { "docs": { "count": 32, "deleted": 0 }, "store": { "size_in_bytes": 110226 }, "indexing": { "index_total": 32, "index_time_in_millis": 27, "index_current": 0, "index_failed": 0, "delete_total": 0, "delete_time_in_millis": 0, "delete_current": 0, "noop_update_total": 0, "is_throttled": false, "throttle_time_in_millis": 0 }, "get": { "total": 0, "time_in_millis": 0, "exists_total": 0, "exists_time_in_millis": 0, "missing_total": 0, "missing_time_in_millis": 0, "current": 0 }, "search": { "open_contexts": 0, "query_total": 9, "query_time_in_millis": 4, "query_current": 0, "fetch_total": 2, "fetch_time_in_millis": 22, "fetch_current": 0, "scroll_total": 0, "scroll_time_in_millis": 0, "scroll_current": 0, "suggest_total": 0, "suggest_time_in_millis": 0, "suggest_current": 0 }, "merges": { "current": 0, "current_docs": 0, "current_size_in_bytes": 0, "total": 0, "total_time_in_millis": 0, "total_docs": 0, "total_size_in_bytes": 0, "total_stopped_time_in_millis": 0, "total_throttled_time_in_millis": 0, "total_auto_throttle_in_bytes": 41943040 }, "refresh": { "total": 17, "total_time_in_millis": 59, "listeners": 0 }, "flush": { "total": 3, "periodic": 0, "total_time_in_millis": 49 }, "warmer": { "current": 0, "total": 9, "total_time_in_millis": 0 }, "query_cache": { "memory_size_in_bytes": 0, "total_count": 0, "hit_count": 0, "miss_count": 0, "cache_size": 0, "cache_count": 0, "evictions": 0 }, "fielddata": { "memory_size_in_bytes": 0, "evictions": 0 }, "completion": { "size_in_bytes": 0 }, "segments": { "count": 2, "memory_in_bytes": 54638, "terms_memory_in_bytes": 45578, "stored_fields_memory_in_bytes": 624, "term_vectors_memory_in_bytes": 0, "norms_memory_in_bytes": 7168, "points_memory_in_bytes": 44, "doc_values_memory_in_bytes": 1224, "index_writer_memory_in_bytes": 0, "version_map_memory_in_bytes": 0, "fixed_bit_set_memory_in_bytes": 0, "max_unsafe_auto_id_timestamp": -1, "file_sizes": {} }, "translog": { "operations": 32, "size_in_bytes": 67036, "uncommitted_operations": 0, "uncommitted_size_in_bytes": 110, "earliest_last_modified_age": 0 }, "request_cache": { "memory_size_in_bytes": 770, "evictions": 0, "hit_count": 3, "miss_count": 2 }

Hope this helps, please let me know.