Hi everyone,
I'm trying to use the elasticsearch input and the results are not as I excpect. I want the data to be inputed ordered by @timestamp. This is my configuration:
input {
Read all documents from Elasticsearch matching the given query
elasticsearch {
scan => false
hosts => "10.0.211.42:9200"
index => "logstash-*-qc"
query => '{ "query": { "match": { "Status": "New" } },"sort": [ {"@timestamp": {"order": "desc"}}] }'
}
}
output {
file
{
path => "C:/out.txt"
}
}
But still the output has no order... What can I do?
Thank you!