I'm using curl to add apache logrows as documents to elasticsearch using the bulk API. I post the following:
{"index": {"_type": "apache", "_id": "123", "_index": "apache-2017-01"}}
{"s": 200, "d": "example.se", "@t": "2017-01-01T00:00:00.000Z", "p": "/foo"}
{"index": {"_type": "apache", "_id": "124", "_index": "apache-2017-01"}}
{"s": 200, "d": "example.se", "@t": "2017-01-01T00:00:00.000Z", "p": "/bar"}
... more of the same ...
My guess is that for every logrow document row the lucene index updates it's index. But I do not need elasticsearch to do that. I am perfectly fine with adding all logrow documents first, and after that update the index.
Is this possible? Is it a good idé? Will it pollibly improve performance?