Recently I just make some changes to the logstash and the new data that are flowing into Kibana comes with field.
However, for the data that has already been inside Kibana, obviously it will not be affected by the new logstash configuration.
Is there any way for me to generate fields for those data?
I know one way is to send all the data through logstash again but my concern is that these data will be flowing into Kibana at one shot and it causes the graph to have a big spike.
*I'm using redis to store the data