At the moment, I have a query and it runs against the Logstash-* index but once it's done reading from today's date it closes the connection.
Is there a way to keep it always running so it will pick up any new logs? I tried adding stdin plugin to keep the script running, but after the Elasticsearch has done it's reading, it still closes the Elasticsearch part of the connection.
Please could someone help? Thank you for your time