I would like to track timestamp and status of long running benchmarks in Elasticsearch. Start and ending of the run can be identified by logstash by it's input.
Is it possible that logstash updates a single field in a document which is already indexed into elasticsearch?
I know that under the hood the document is deleted and created new. My concern is that I read the document_id from the logfile. Inside of this document would like to change fields like timestamp and status. Other fields needs to stay as they are.