Increment similar event count if occurs inside time window

I have several events that are processed by logstash and gets inserted to elastic db. For certain events instead of creating a record I need to increment a counter field in my record if it matches a given type and creation_time is in certain range.

Is there a way to do this using logstash plugin or in elastic query without the network overhead of multiple requests.

Im looking for a way to perform upsert in logstash

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.