elasticsearch 从logstash中的API中过滤数据,并将其索引到ElasticsSearch,elasticsearch,logstash,elasticsearch,Logstash" /> elasticsearch 从logstash中的API中过滤数据,并将其索引到ElasticsSearch,elasticsearch,logstash,elasticsearch,Logstash" />

elasticsearch 从logstash中的API中过滤数据,并将其索引到ElasticsSearch

elasticsearch 从logstash中的API中过滤数据,并将其索引到ElasticsSearch,elasticsearch,logstash,elasticsearch,Logstash,我不熟悉elasticsearch索引,我需要一些帮助, 我使用http使用logstash配置文件调用一个API,它返回如下数据: "headers": {}, "@version": "1", "host": "host1", "body": { "HighQuality": [ {

我不熟悉elasticsearch索引,我需要一些帮助, 我使用http使用logstash配置文件调用一个API,它返回如下数据:

"headers": {},
"@version": "1",
"host": "host1",
"body": {
            "HighQuality": [
                    {
                        "key": "somdata",
                        "date": "2009-08-04",
                        "website": {
                            "name": "web1",
                            "id": "id12345"
                        },
                        "link": "http://good.com.go",
                        "policy": {
                            "name": "somname",
                            "url": "URL"                           
                        },
                        "id": 123,
                        "notes": []
                    },
                    {
                        "key": "somdata2",
                        "date": "2009-08-04",
                        "website": {
                            "name": "web122",
                            "id": "id1234522"
                        },
                        "link": "http://good222.com.go",
                        "policy": {
                            "name": "somname222",
                            "url": "URL22"                           
                        },
                        "id": 123222,
                        "notes": []
                    }
                        ],
            "LowQuality": [
                    {
                        "key": "somdata",
                        "date": "2009-08-04",
                        "website": {
                            "name": "web1",
                            "id": "id12345"
                        },
                        "link": "http://good.com.go",
                        "policy": {
                            "name": "somname",
                            "url": "URL"                           
                        },
                        "id": 123,
                        "notes": []
                    },
                    {
                        "key": "somdata2",
                        "date": "2009-08-04",
                        "website": {
                            "name": "web122",
                            "id": "id1234522"
                        },
                        "link": "http://good222.com.go",
                        "policy": {
                            "name": "somname222",
                            "url": "URL22"                           
                        },
                        "id": 123222,
                        "notes": []
                    }
                        ]   
        }
现在,数据被插入Elasticsearch索引中,只在一个包含所有数据的文档下

但我的目标是在索引之前格式化数据,将高质量和低质量的列表转换为单独的文档。稍后我可能会按键搜索特定文档 类似这样的:

"host": "host1","type":"HighQuality","key": "key11111","date": "2009-08-04","website": {"name": "web1", "id": "id12345"},"link": "http://good.com.go","policy": {"name": "somname","url": "URL"},"id": 111,"notes": []
"host": "host1","type":"HighQuality","key": "key22222","date": "2009-08-04","website": { "name": "web122", "id": "id1234522"},"link": "http://good222.com.go","policy": {"name": "somname222", "url": "URL22"},"id": 222, "notes": []
"host": "host1","type":"LowQuality","key": "key3333","date": "2009-08-04","website": {"name": "web1", "id": "id12345"},"link": "http://good.com.go","policy": {"name": "somname","url": "URL"},"id": 333333,"notes": []
"host": "host1","type":"LowQuality","key": "key4444","date": "2009-08-04","website": {"name": "web1", "id": "id12345"},"link": "http://good.com.go","policy": {"name": "somname","url": "URL"},"id": 444444,"notes": []
我需要在logstash过滤器{}中编写什么来在索引之前转换数据? 非常感谢你的帮助