How to monitor/discover modification of documents?


ELK version: 7.7.0

Is there any way to monitor/discover modification of documents in the ELK? Any idea?

Best Regards,

Is this an application question? For the latter, you could have an ingest pipeline that creates a last_modified timestamp and query for that one to find recently changed documents?

Hi @spinscale,

Yes, this is in case of logs from application. Thanks for your suggestion.


1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.