diff --git a/doc/_admin-guide/070_Destinations/030_Elasticsearch-http/001_Elasticsearch-http_options.md b/doc/_admin-guide/070_Destinations/030_Elasticsearch-http/001_Elasticsearch-http_options.md index feba785f..d8f3f90e 100644 --- a/doc/_admin-guide/070_Destinations/030_Elasticsearch-http/001_Elasticsearch-http_options.md +++ b/doc/_admin-guide/070_Destinations/030_Elasticsearch-http/001_Elasticsearch-http_options.md @@ -150,10 +150,20 @@ Use an empty string to omit the type from the index: type(""). For example, you need to do that when using Elasticsearch 7 or newer, and you use a mapping in Elasticsearch to modify the type of the data. +**NOTE:** In {{ site.product.short_name }} 4.11 and later versions the `type()` option is deprecated for elasticsearch destinations and including it in the configuration does not affect any functionality. +{: .notice--info} + {% include doc/admin-guide/options/time-reopen.md %} {% include doc/admin-guide/options/timeout.md %} +## op-type() + +|Accepted Values:| `index`, `create`| +|Default:| N/A| `index`| + +*Description:* This option can be used to modify the type of the data in Elasticsearch destinations. Use `op-type(create)` in case of datastreams. + ## url() | Type: | URL or list of URLs, for example, url(\"site1\" \"site2\")| diff --git a/doc/_admin-guide/070_Destinations/030_Elasticsearch-http/README.md b/doc/_admin-guide/070_Destinations/030_Elasticsearch-http/README.md index 330e1864..539d58a6 100644 --- a/doc/_admin-guide/070_Destinations/030_Elasticsearch-http/README.md +++ b/doc/_admin-guide/070_Destinations/030_Elasticsearch-http/README.md @@ -28,16 +28,24 @@ Responses containing partial results still provide a 200 OK HTTP status code. Sh **Declaration** ```config -d_elasticsearch_http { - elasticsearch-http( - index("") - url("https://your-elasticsearch-server1:9200/_bulk" "https://your-elasticsearch-server2:9200/_bulk") - type("") +destination d_opensearch { + elasticsearch( + index("myds") + op_type("create") + user("elastic") + password("8h2OLVGJ") + url("http://localhost:9200/_bulk") + template("$(format-json --scope rfc5424 --scope dot-nv-pairs + --rekey .* --shift 1 --scope nv-pairs + --exclude DATE @timestamp=${ISODATE})") ); }; ``` -Use an empty string to omit the type from the index: type(" "). For +**NOTE:** In {{ site.product.short_name }} 4.11 and later versions the `type()` option is deprecated for elasticsearch destinations and including it in the configuration does not affect any functionality. +{: .notice--info} + +In versions prior to 4.11, you can use an empty string to omit the type from the index: type(" "). For example, you need to do that when using Elasticsearch 7 or newer, and you use a mapping in Elasticsearch to modify the type of the data. diff --git a/doc/_admin-guide/070_Destinations/035_elasticsearch-datastream/README.md b/doc/_admin-guide/070_Destinations/035_elasticsearch-datastream/README.md index 1d89f6f1..f3b6d888 100644 --- a/doc/_admin-guide/070_Destinations/035_elasticsearch-datastream/README.md +++ b/doc/_admin-guide/070_Destinations/035_elasticsearch-datastream/README.md @@ -3,7 +3,7 @@ title: 'elasticsearch-datastream: Elasticsearch data streams' short_title: elasticsearch-datastream id: adm-dest-es-datastream description: >- - From {{ site.product.short_name }} 4.8 and later versions, you can send messages and metrics to Elasticsearch data streams to store your log and metrics data as time series data. + Note that the Elasticsearch datastream destination is deprecated. To achive the same functionality, use the `elasticsearch()` destiniation and include the `op_type("create")` option. --- **Declaration**