I've been researching this question myself, and the best I can tell from doc.s there is no mechanism to push all data from Elasticsearch to another destination. ... However, having worked with Logstash before, I can say that it would definitely support sending all data to a second destination -- and with special handling (filtering, transformation, etc.) if you desired. Search "logstash output-plugins" and you should find what you need. ... View more

I ran into this. Try adding the "keepevicted" (boolean) option to the transaction command. In your example simply : ... | transaction DpsNum maxevents=-1 keepevicted That got me from ~5000 to ~35000. ... View more