# Can I use Logstash to add new fields to a document that's already in Elasticsearch?

**URL:** https://discuss.elastic.co/t/can-i-use-logstash-to-add-new-fields-to-a-document-thats-already-in-elasticsearch/52238
**Category:** Logstash
**Created:** [June 8, 2016, 5:22pm UTC](https://discuss.elastic.co/t/can-i-use-logstash-to-add-new-fields-to-a-document-thats-already-in-elasticsearch/52238 "2016-06-08T17:22:51Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![yannakopoulos](https://avatars.discourse-cdn.com/v4/letter/y/ecc23a/32.png) [@yannakopoulos](https://discuss.elastic.co/u/yannakopoulos)
#### Post date: [June 8, 2016, 5:22pm UTC](https://discuss.elastic.co/t/can-i-use-logstash-to-add-new-fields-to-a-document-thats-already-in-elasticsearch/52238/1 "2016-06-08T17:22:51Z")

</div>

I'm looking to consolidate several log files into one index. I have a unique ID that I can use to link a document of one type to a document of the other. Is there a way to use Logstash to update existing documents by adding new fields without replacing/deleting the old fields?

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 9, 2016, 12:41am UTC](https://discuss.elastic.co/t/can-i-use-logstash-to-add-new-fields-to-a-document-thats-already-in-elasticsearch/52238/2 "2016-06-09T00:41:47Z")

</div>

Yep, you can specify that ID as the document ID when you upload to ES - [https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-document\_id](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-document_id)

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [June 9, 2016, 5:41am UTC](https://discuss.elastic.co/t/can-i-use-logstash-to-add-new-fields-to-a-document-thats-already-in-elasticsearch/52238/3 "2016-06-09T05:41:23Z")

</div>

You should be able to do this using [scripted updates](https://www.elastic.co/guide/en/elasticsearch/reference/2.3/docs-update.html#_scripted_updates). For this to work you need to enable scripting and provide the [scripting settings](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-script) in the Elasticsearch output plugin together with the document ID that Mark pointed out.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 4:53am UTC](https://discuss.elastic.co/t/can-i-use-logstash-to-add-new-fields-to-a-document-thats-already-in-elasticsearch/52238/4 "2017-07-06T04:53:56Z")

</div>


