Learning Elasticsearch

Copying top N documents

You can use Reindex API to copy top N documents based on a field. Suppose you want to copy only the last 1,000 logs based on the timestamp field to a new index. You can use the Reindex API as shown here:

POST _reindex {   "size": 1000,   "source": {     "index": "source_index",     "sort": {       "timestamp": "desc"     }   },   "dest": {     "index": "dest_index"   } }