I'm using high level rest client to bulk insert data. In the BulkRequest object, we are inserting the data with the 'index' operation. like this:
{ "index" : { "_index" : "test", "_id" : "1" } }
{ "field1" : "value1" }
But in data stream, we have to use 'create' operation. like this,
{"create":{ }}
{ "@timestamp": "2099-03-08T11:04:05.000Z", "user": { "id": "vlb44hny" }, "message": "Login attempt failed" }
Is there an option where I could tell my rest client to use 'create' instead of 'index'?
Or is there a work around to insert the docs with 'index' op?
How exactly 'create' and 'index' operations differ from each other and why data stream need to use 'create' opration