Hello,
I have a question, I am using ELK. In logstash, I have created my own parsings logs and I want to ask you if I can re-process the previous logs but using my new parsings.
Thank you very much
You can read old logs with an elasticsearch input plugin and apply whatever transformation you want then outpost to elasticsearch again.
I moved the question to #logstash.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.