Elasticsearch documents getting updated with same document id

Elastic Stack Logstash
1

Hello i am using one of the field to be made as document id when ingesting in ES and so that if any document comes with same document id, it shouldn't get ingested or updated. But i see the documents are getting updated.Below is my output config. I am using logstash-output-elasticsearch (9.0.2) version

output{
       elasticsearch {
           hosts => [ ]
    index => "event-weight"
    doc_as_upsert => false
    document_id => "%{eventFingerprint}"
    cacert => ""
    user => elastic
    password => ""
    }
}
2

Got this working by setting the "action" config to "create" in ES output

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.