Logstash elasticsearch input re-running query infinately


(Jeremy Page) #1

Config below, I expect this to run once at 2:55 PM but it's never stopping. I can see it's getting the right data but once it completes the query it just starts it back up again. This is using logstash 5.6.12. Any suggestions?

input {
  elasticsearch {
    hosts => "es-int.prod.company.com"
    index => "logstash-event-*"
    schedule => "55 14 * * *" 
    query => '{
    "query": {
        "bool": {
            "must": [
                {
                    "match": {
                        "siteId": 141484
                    }
                }
            ],
            "filter": [
                {
                    "range": {
                        "timestamp": {
                            "gte": "2018-08-01T00:00:00.000Z",
                            "lte": "2018-08-31T23:59:59.999Z"
                        }
                    }
                }
            ]
        }
    }
}'
  }
}

(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.