For helping users to reduce duplicates in Elasticsearch, Beats should have some opt-in support to configure the document ID. If the field @metadata.id is set, Beats will already use said ID as document ID. But this feature is still well hidden, because we currently have no support for setting this field.
If the document ID is set, Beats will publish using the op_type create.
For helping users to reduce duplicates in Elasticsearch, Beats should have some opt-in support to configure the document ID. If the field
@metadata.idis set, Beats will already use said ID as document ID. But this feature is still well hidden, because we currently have no support for setting this field.If the document ID is set, Beats will publish using the
op_typecreate.