Issues

Select view

Select search mode

 

Unable to use external id for elasticsearch / elasticsearch_http

Cannot Reproduce

Description

I am trying to use the ID of the object I am passing through as the document id. Below is my logstash config. However instead of seeing the actual id in output in ES, I see the literal "%{id}" as the ID.

input {
syslog {
}
}

output {
elasticsearch_http {
host => "localhost"
flush_size => 1
index => "index-%{+YYYY.MM.dd}"
index_type => "type"
template => "template.json"
template_name => "mytemplate"
document_id => "%{id}
}
}

Gliffy Diagrams

Details

Assignee

Reporter

Affects versions

Created March 29, 2014 at 12:11 AM
Updated March 29, 2014 at 5:08 AM
Resolved March 29, 2014 at 5:08 AM

Activity

Show:

Priyank Bagrecha March 29, 2014 at 5:08 AM

my bad, realized that the data for id field itself was missing in the data being passed.