Filter data already exists into ES

(kim) #1

hello every one ;

i would like to know if is it possible to apply grok filter for data already exists into elasticsearch and filtered before , for your information i have ELK stack via docker , so everytime i do docker-compose down & up for apply a new grok filter configuration but in each time i have to reload data into elasticsearch , but when i added persistant data option when i modify the grok filter config then make containers down & up , data dont lost but stay with the old filter configuration .


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.