Duplicated data

Elastic Stack Logstash
1

Hi,
I am using jdbc to grab data from SQL, and it works, kind of.
I have default index XXXXXX but from database i want to create a new index.

output {
 if [type] == "stops" or [type] == "signon"  {
   elasticsearch {
  hosts => ["http://elasticsearch:9200"]
    ilm_rollover_alias => "WWWW"
 }
}
else{
elasticsearch {
hosts => ["http://elasticsearch:9200"]
ilm_rollover_alias => "ZZZZ"
}
}
stdout { codec => rubydebug }	
}

In kibana i see that i have index WWWW and ZZZZ, but the same data i get in my default index XXXX, how to do to get data only to WWWW and ZZZZ ?

2

I solve it, i found that elasticsearch MERGE config file, due to my conditions (if and else) did not work correctly. After I changed my conditions everything work fine.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.