|
}
{
"queryType": "fulltext",
"attributes": {
"searchTerm": "live"
},
"expectedResults": [
{
"timestamp": "2018-11-01T11:00:20.775Z",
"hostId": "10.0.0.11",
"serviceName": "www",
"id": "8",
"message": "live 5.1.9"
},
"hostId": "10.0.0.12",
"serviceName": "db",
"id": "12",
}
]
]
}
Any hints or workarounds are welcome. Thank you!
A:
The bulk command operates only on the first document in the stream, so the second document is discarded. The only way to keep all documents is to use the accumulate command and the max function in the id field. This is because a document with id == max(id) appears at the beginning of the stream and can't be deleted.
{
"indexConfiguration": {
"numberOfShards": 1,
"numberOfReplicas": 0
},
"mappings": {
"message": {
"properties": {
"id": {
"type": "keyword
Related links:
Comments