Hi all,
I am wondering if there is a way to have the elasticsearch input filter search multiple times instead of once. Right now I am trying to use the filter to watch for changes a certain index and (ideally) have the input activate each time there is a new event in the index.
input {
elasticsearch {
hosts => ["localhost:9200"]
index => "final-waitingactivitylogs"
scroll => "1m"
}
}
Right now it seems to only run once on logstash start. Can I have it so it runs on an interval or all the time?
Thanks