hello every one ;
i would like to know if is it possible to apply grok filter for data already exists into elasticsearch and filtered before , for your information i have ELK stack via docker , so everytime i do docker-compose down & up for apply a new grok filter configuration but in each time i have to reload data into elasticsearch , but when i added persistant data option when i modify the grok filter config then make containers down & up , data dont lost but stay with the old filter configuration .
thanx