Logstash config to ingest data by filtering the data that is already present in another index in ES

Elastic Stack Logstash
1

Hello All,
I have a requirement to ingest only the data which already exists in another index. For example I have a index in ES like index1 =[source=a,time=b,value=c,id=d] and data set to be ingested like sample=[value=c,value=d].

I wanted to ingest only value=c data to ES via logstash since that is also present in index1.
Is there any filter which checks for a for a field value or any other ways exists to achieve this?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.