Learning Elasticsearch

Copying a subset of documents into a new index

You can use Reindex API to copy only the documents that match a query. Suppose you have a index which contains application logs and you want to copy only the error logs into a new index. You can use reindex as shown next:

POST _reindex {   "source": {     "index": "source_index_1",     "type": "log",     "query": {       "term": {         "level": "ERROR"       }     }   },   "dest": {     "index": "dest_index"   } }