How to process again documents already ingested

Elastic Stack Elasticsearch
1

Hi all,
I would like to know if there is a way to process again documents already saved into the indices.
I noticed that my Logstash pipeline was not completed so now I know like to process a specific field.

in my documents, I have a field named build_type (generally with values like /OPS/service/build/username). I would like to extract a portion of that field for every documents.

thanks

2

If you want to run them through Logstash you will want to use the elasticsearch input and then run that through the rest of your config.

3

so, in my input section I must use elasticsearch plugin and the ingest them again?

4

The easiest way to do this is probably to use the reindex API with an ingest pipeline to make the change you are looking for.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.