Logstash running as a Service

Logstash as a service. After the initial pull of data. Does logstash run through each record and updates based on ID? Is this something that takes a long time because it goes through everything that has been pulled?

If you supply the document_id then elasticsearch will index your logstash document overtop of the existing document, otherwise it will just generate a new _id and add it on to the index.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.