I tried using query in elasticsearch filter plugin to retrieve events from an existing index.But its throwing up some warning.
My conf for filter is as follows:
elasticsearch {
hosts => ["localhost:9200"]
index => "sample_index"
query => "KeyId:%{[FEED]}"
fields => { "REC_TIME" => "RT" }
}
The error I have been facing is
[2017-08-10T16:12:12,026][WARN ][logstash.filters.elasticsearch] Failed to query elasticsearch for previous event {:index=>"sample_index", :query=>"KeyId:prod07", :event=>2017-06-30T05:00:00.000Z,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, , :error=>#<Elasticsearch::Transport::Transport::Errors::MovedPermanently: [301]
Redirection