You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'd like to set the period at which the Elasticsearch filter in logstash flies the query.
When data is received through the input, the value of the id field is dropped into the query to obtain the name corresponding to the id from the existing index.
The problem is that the filter runs the query at a slower rate, periodically the result(dashboard field) is displayed as nil.
We need to run queries on every piece of data collected.
I'd like to set the period at which the Elasticsearch filter in logstash flies the query.
When data is received through the input, the value of the id field is dropped into the query to obtain the name corresponding to the id from the existing index.
The problem is that the filter runs the query at a slower rate, periodically the result(dashboard field) is displayed as nil.
We need to run queries on every piece of data collected.
filter {
elasticsearch {
hosts => ["localhost:9200"]
index => ".kibana"
query => "_id:/dashboard?/%{[args][objects][id]}"
fields => {"dashboard" => "dashboard"}
enable_sort => false
}
mutate {
add_field => {
"title" => "%{[dashboard][title]}"
}
}
The text was updated successfully, but these errors were encountered: