Hi,
our system generate netstat and vmstat every half hour and we are ingesting the data and we are overriding the timestamp with my log time stamp in logstash.
We have below issue when we are ingesting the historical data.
we are having one week netstat data and one day vmstat data. When we are ingesting the data, netstat and vmstat both are creating with 7 different indexes with dates. The issue is vmstat should create only one index as it is having only one day data but it is creating 7 indexes. when both indexes having same dates data, indexes are creating properly. Is there any way to fix this kind of issues.
We are using file beat to push the data logstash.