I am using Filebeat with Elasticsearch. I want to update log files with same Document IDs, which one can achieve with PUT request in Dev Tools (PUT /index/_doc/_id). How to achieve the same functionality with filebeat?
I'm afraid you're doing it the wrong. Filebeat is not designed to replace exisiting logs. I think you can also take a look at retention policy.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.