Logstash Duplicate Data Output?

My input is from elasticsearch. I want to combine multiple indices in one index.
As I'd output the data in the elasticsearch, I can see that the data is much more data if I total from the source than the combined data.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.