Hi all,
I have some map for mapping and data on elasticsearch.
My filter plugin is the following
elasticsearch{
hosts => ["localhost:9200"]
index => "mapping_av"
query => "signature:%{[id]}"
result_size => 1
fields => {"name" => "id_name"}
}
elasticsearch{
hosts => ["localhost:9200"]
index => "mapping_device_sn"
query => "sn:%{[device_sn]}"
result_size => 1
fields => {
"customer" => "customer"
"warranty_date" => "warranty_date"
}
}
I know that logstash can handle document update.
But is it possible to reach the following functionality when updating the map?
- Update the missing value in the document.
- Update the changed value in the document.
In other words, when I use logstash to update the map.
I also want to update the document related to it with the new map.