Hello! I need to update several docs into an old index based on a value of new records still do not indexed? Is there any way to implement it with Logstash? This table below describes my index with old docs. The yellow line would be a new doc arriving. RULE: As far the latest entry is received (NE…

Badger September 30, 2020, 1:11pm 2

You could use Update by Query and an http output that posts to elasticsearch. There is an example here.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Update indexed docs based on a value from a new doc still does not indexed