Update document in elasticsearch


(Richa) #1

Hi Team,

I have used logstash to parse the log file then using elasticsearch to save the index and kibana to visualize it.

My problem is that for a particular log file (Path) i am getting value of one filed only once and for rest of the rows, for same file(Path), i want to update that filed with the same value which i got in one of the record.

sample sql query:

update Path A set A.Filed = B.Filed
from Path A, Path B
where A.Path = B.Path and A.Filed = null.

Is it possible to update it in elasticsearch using kibana dev tool or how can i achieve this. Any sample query to handle such type of situation

Thanks


(Richa) #2

Hi,

Any suggestion for above scenario.
Can i update it in logstash using ruby filter


(Mark Walkom) #3

You cannot do this with a query, you would need to do it before you sent it to Elasticsearch for indexing.


(Richa) #4

Thanks for the confirmation.

Can I update it in logstash using Ruby filter.

Thanks


(system) #5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.