I want to change SQL statement in my logstash, so I would fill index with newely queried data.
I re-run logstash with new statement but my index still contains old data. Am I missing something?
That is expected. If you want the index to just contain the data from the latest run you would have to delete the index before running logstash the second time.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.