Creating a VM Status Table - Visualization

[LeeDr (Lee Drengenberg)]

It looks like the beats don't have a way to do updates. So you would have to have your beats (or only the ones where you want a current status index) to Logstash and let it write to your Elasticsearch.

Here's one other post where a user is doing updates;

Logstash Update a document in elasticsearch

Trying to update a specific field in elasticsearch through logstash. Is it possible to update only a set of fields through logstash ? Please find the code below, filter { csv { separator => "|" columns => ["NAME","ID","COUNTRYNAME","DATE","STATECODE", "G_NAME","G_ID","G_COUNTRYNAME"," G_DATE","G_STATECODE"] } ruby { code => " hash = event.to_hash hash.each do |k,v| if v == nil event.remove(k) end end " } } We are using the above configuration when we use this the null value fi…

and another;

Updating documents with Elasticsearch output

I'm trying to figure out how to update documents properly using the Elasticsearch output. Documentation on this issue is very confusing. I have a document that might already be in Elasticsearch, and if so I would like to update it. Going over the documentation I see that there are multiple options for updating documents. So for example this is my current configuration: if [doc_id] { elasticsearch { hosts => ["http://elastic:9200"] document_type => "log" document_id => "%{doc_id}…

I'm sorry that neither of those seems very clear.

If you want to post some data I could see if there's a way to get the table you're looking for without having to use Logstash to create another index.