import data problem

[yen-junyu]

I try to import data use "official ElasticSearch service" , and I encountered the following problem.

what setting I miss? or I need to change json file by myself to fit the import format?

[afcidk]

You have to modify the json file. Simply remove the _index, _type, _id, _score key and _source key.

That is to change

{
   "_index":"logstash-netsec.proj2-2021.04.08",
   "_type":"_doc",
   "_id":"KakgsHgBrjaDa8NYk4HG",
   "_score":0,
   "_source":{ ...Only leave the value here... }
}

to

{ ... The value of _source key ... }

[yen-junyu]

Thanks for reply.