New to Ingest Pipeline

Elastic Stack Elasticsearch
1

Hi:
I have an index intune-* where I need to modify some fields. Once I create the index pipeline how do I tag it to the appropriate Index ? I have a rolling index

I read this documentation but wasnt clear on step-9 .. Does the below tag an Ingest pipeline " access" logs with my-index... Is this one time effort where you do for your first index and it will continue through the rolling indexes... If I have multiple indexes myindex-* should work right ?

PUT my-index/_doc/1?pipeline=access_logs
{
  "message": "212.87.37.154 - - [05/May/2020:16:21:15 +0000] \"GET /favicon.ico HTTP/1.1\" 200 3638 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36\""
}
2

I got the answer while creating the Index template we can define for the same " "default_pipeline": "transform pipelineName" for new indexes and for existing ones we can run the put command above right ?

3

Yes that's correct :slight_smile:

1 Like
4

Thanks

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.