Timespan filter inside Elasticsearch index

Elastic Stack Elasticsearch
1

Hi All,

I have an index called filebeat-* which gets appended with date everyday when we run the server.
Example apache-2017-10-23,

Now i want to use the filebeat-* index as input in logstash configuration file and filter based on apache grok patterns and the result would be saved in new index.

My query is , since the logstash will be in nohup mode and it runs continues, will the elasticsearch gets duplicate data ?

TIA

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.