Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -150,10 +150,20 @@ Use an empty string to omit the type from the index: type(""). For
example, you need to do that when using Elasticsearch 7 or newer, and
you use a mapping in Elasticsearch to modify the type of the data.

**NOTE:** In {{ site.product.short_name }} 4.11 and later versions the `type()` option is deprecated for elasticsearch destinations and including it in the configuration does not affect any functionality.
{: .notice--info}

{% include doc/admin-guide/options/time-reopen.md %}

{% include doc/admin-guide/options/timeout.md %}

## op-type()

|Accepted Values:| `index`, `create`|
|Default:| N/A| `index`|

*Description:* This option can be used to modify the type of the data in Elasticsearch destinations. Use `op-type(create)` in case of datastreams.

## url()

| Type: | URL or list of URLs, for example, url(\"site1\" \"site2\")|
Expand Down
20 changes: 14 additions & 6 deletions doc/_admin-guide/070_Destinations/030_Elasticsearch-http/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -28,16 +28,24 @@ Responses containing partial results still provide a 200 OK HTTP status code. Sh
**Declaration**

```config
d_elasticsearch_http {
elasticsearch-http(
index("<elasticsearch-index-to-store-messages>")
url("https://your-elasticsearch-server1:9200/_bulk" "https://your-elasticsearch-server2:9200/_bulk")
type("<type-of-the-index>")
destination d_opensearch {
elasticsearch(
index("myds")
op_type("create")
user("elastic")
password("8h2OLVGJ")
url("http://localhost:9200/_bulk")
template("$(format-json --scope rfc5424 --scope dot-nv-pairs
--rekey .* --shift 1 --scope nv-pairs
--exclude DATE @timestamp=${ISODATE})")
);
};
```

Use an empty string to omit the type from the index: type(" "). For
**NOTE:** In {{ site.product.short_name }} 4.11 and later versions the `type()` option is deprecated for elasticsearch destinations and including it in the configuration does not affect any functionality.
{: .notice--info}

In versions prior to 4.11, you can use an empty string to omit the type from the index: type(" "). For
example, you need to do that when using Elasticsearch 7 or newer, and
you use a mapping in Elasticsearch to modify the type of the data.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: 'elasticsearch-datastream: Elasticsearch data streams'
short_title: elasticsearch-datastream
id: adm-dest-es-datastream
description: >-
From {{ site.product.short_name }} 4.8 and later versions, you can send messages and metrics to Elasticsearch data streams to store your log and metrics data as time series data.
Note that the Elasticsearch datastream destination is deprecated. To achive the same functionality, use the `elasticsearch()` destiniation and include the `op_type("create")` option.
---

**Declaration**
Expand Down