Ah, that's what you meant 
. But as I understand it, the transform happens only after I have added a file via logstash. How should it be possible to split the transform with logstash afterwards?
You are right, it's not possible. You can let transform feed into an ingest pipeline, but not to logstash.
The split functionality is a missing feature in ingest: [Ingest Pipeline] Ability to split documents · Issue #56769 · elastic/elasticsearch · GitHub
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.