New index from existing index

Elastic Stack Elasticsearch
1

Hi,

Is it possible to create a new index in Elastic, from an existing index, fx if you want to flatten your index?

Regards

Søren

2

The reindex API would help?

3

Yeah probably. So would it be possible to have one index coming from fx Logstash continously, and if the need would come to have another index, fx a flattened one from the original index, then would it be possible to create the new index from the first index and then it would always be up to date?

Regards

Søren

4

Reindex API is a one shot operation. It does not run in the background to monitor changes from the source index.

5

What would be the best approach. To run the operation through Logstash again in order to apply the correct filters?

So setup Logstash to extract the index from Elastic and let Logstash do it's filter plugins and the apply the output to a new index?

6

Yes why not. Sounds like a good approach to me.

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.