Update single fileds in a given document already stored in ES?

Elastic Stack Logstash
1

Hi all,

I would like to track timestamp and status of long running benchmarks in Elasticsearch. Start and ending of the run can be identified by logstash by it's input.

Is it possible that logstash updates a single field in a document which is already indexed into elasticsearch?

I know that under the hood the document is deleted and created new. My concern is that I read the document_id from the logfile. Inside of this document would like to change fields like timestamp and status. Other fields needs to stay as they are.

Thanks, Andreas

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.