I am trying to index/update same event as json chunks (due to event size limit set by input file plugin) using elastic search output plugin. I can see only the last updated chunk in the elastisearch index. I would like to add new fields to the existing index rather than completely replacing with the new fields. Please suggest a way to accomplish my use case. Thank you.
After a while, I came across this issue in GitHub https://github.com/logstash-plugins/logstash-output-elasticsearch/issues/383
Dynamic action isn't working with upsert
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.