所以我從logstash索引記錄沒有問題,但是我希望能夠將同一記錄索引到多個索引。
目前在我的logstash輸出中我有這個:
output{
elasticsearch {
hosts => ["myHost"]
user => "myUser"
password => "myPassword"
cacert => "myCert.pem"
index => "myIndex_primary"
document_id => "12345"
action => "update"
doc_as_upsert => true
manage_template => false
}
}
可以說我還想將相同的記錄保存到“輔助”索引。這是否可能來自同一個彈性搜索,或者會被迫復制整個彈性搜索呼叫?
我的想法是這樣的:
output{
elasticsearch {
hosts => ["myHost"]
user => "myUser"
password => "myPassword"
cacert => "myCert.pem"
index => ["myIndex_primary", "myIndex_secondary"]
document_id => "12345"
action => "update"
doc_as_upsert => true
manage_template => false
}
}
uj5u.com熱心網友回復:
是的,這是可能的。您需要在組態檔中添加另一個 elasticsearch 輸出。該index選項需要一個字串,而不是一個陣列。
因此,您的管道的輸出部分將如下所示:
output{
elasticsearch {
hosts => ["myHost"]
user => "myUser"
password => "myPassword"
cacert => "myCert.pem"
index => "myIndex_primary" <--- index 1
document_id => "12345"
action => "update"
doc_as_upsert => true
manage_template => false
}
elasticsearch {
hosts => ["myHost"]
user => "myUser"
password => "myPassword"
cacert => "myCert.pem"
index => "myIndex_secondary" <--- index 2
document_id => "12345"
action => "update"
doc_as_upsert => true
manage_template => false
}
}
我希望我能幫助你。
轉載請註明出處,本文鏈接:https://www.uj5u.com/caozuo/428928.html
下一篇:使用動態映射創建索引
