Testing 2 different index mapping in Elastic
I'm trying to test 2 different index mapping in Elastic. How do I send output to these 2 indexes? Doesn't seem like I can do with the "Output" when defining routes (no quick connect).
Answers
-
Index or data stream: Enter a JavaScript expression that evaluates to the name of the Elastic data stream or Elastic index where you want events to go. The expression is evaluated for each event; can evaluate to a constant value; and must be enclosed in quotes or backticks. An event's `__index` field can overwrite the index or data stream name.
0 -
Is that what you are doing?
0 -
I want to send to a data stream and a time series data stream.
0 -
Ah
0 -
duplicate the data on the output
0 -
Clone function first and modify the clone event to a different index, then use an Output Router based on __index to go to two different destinations.
0 -
-
Let me try this. Sounds promising!
0 -
Excellent. This works!
0 -
Noice!
0 -
Output router is amazing!
0 -
I configured 2 output index but I'm getting 3 documents for each interval
0 -
0
0 -
Does it need to be final on both?
0 -
The duplicated documents is on the bottom one.
0 -
No, you have it correct
0 -
You can also use the filters
0 -
I believe it worked fine at first, then it started writing 3 times instead of 2.
0 -
true is everything to both places
0 -
index1 == xyz goes to dest 1 FINAL index2 == abc goes to dest 2 FINAL
0 -
Do I need to change something?
0 -
I DM'd you
0
