I've created a patch long time ago so you can specify the index with the default set to "logstash-*"
It was nearly a year ago but IIRC the query would fail if there are more than one index in the ES server?
I also added a field to save the document id so this matched entry can be overwritten in output, which I had my use case for updating the entry.
Hello, I'm sorry we never got to this issue and PR.
I suspect this issue is no longer relevant. I'm closing this with a :sadpanda:. Let me know if you think this is still an issue, after all these years.
I've created a patch long time ago so you can specify the index with the default set to "logstash-*" It was nearly a year ago but IIRC the query would fail if there are more than one index in the ES server?
I also added a field to save the document id so this matched entry can be overwritten in output, which I had my use case for updating the entry.
Let me know if I'm missing anything.
ref: https://github.com/elasticsearch/logstash/pull/1017