added index, document_id and empty query return

[codyit]

Improved elasticsearch filter.
Added fields
Specify index to be logstash-* by default.
Capture document_id for use in output overwriting.

Return properly if nothing is found.

[jordansissel]

double negative ;)

We can just do: if @document_id

[codyit]

The double negative is fixed. :)
Should make it clear that the version before the patch doesn't work properly, for our installation it only search in the kibana index, so it is also a bug fix.

[codyit]

I guess no one notice the plugin wouldn't work with >1 index = no real use case for this plugin = not worth caring :E

[elasticsearch-release]

Can one of the admins verify this patch?

[jamtur01]

Well it needs to be rebased.

[codyit]

done.

[wiibaa]

@codyit sorry to bother you once more, could you review your proposal on top of existing https://github.com/logstash-plugins/logstash-filter-elasticsearch and if relevant move your PR there. Thanks

[codyit]

From the look of it the code would still fail if there are more than one index unless I'm missing something. It's been a long time since I touched it, and there are active contributors over there, I'll create an issue there instead.

[codyit]

link back:
logstash-plugins/logstash-filter-elasticsearch#5

[jordansissel]

For Logstash 1.5.0, we've moved all plugins (and grok patterns) to individual repositories. Can you move this pull request to https://github.com/logstash-plugins/logstash-filter-elasticsearch?

This sequence of steps may help you do this migration:

1. Fork this repository

2. Clone your fork

   git clone https://github.com/codyit/logstash.git

3. Create a branch:

   git checkout -b my-branch-name

4. Apply the patches from this PR into your branch:

   curl -s https://github.com/elastic/logstash/pull/1017.patch | git am

   This should take your commits from this PR and commit them to your new local branch.

5. Push!

   git push origin my-branch-name

6. Open a new PR against https://github.com/logstash-plugins/logstash-filter-elasticsearch