However, for the 1800s there are very few documents for each index. So I have 100 documents in the index works-1802, but I have 4 million in works-2020. What I would like to do is send any document in the 1800s into a single index labeled something like works-1800. Is there a way to do that in logstash?
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.