How to identify whether a elasticsearch document is modified or not?

Elastic Stack Logstash
1

Hi All,

If a logstash pipeline (conf file) is used to update and insert both i.e., enabled below in the conf file.

doc_as_upsert => true
action => "update"

How to know which documents are updated and which are inserted?

Please note that I have checked about _version field. But it is not helpful in my case as it is not a searchable field.

Please guide!

Regards,
Souvik

2

I suppose you need some "update_counter" or "update_flag" field which is inserted by some script.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.