es-scan.py

#!/usr/bin/env python3

from elasticsearch import Elasticsearch, helpers
import json

es = Elasticsearch(
    hosts=[
        'host:9200'
    ]
)

# Initialize the scroll
res = helpers.scan(client = es, scroll = '1m', index = "logs-*")

with open("/home/user/data/logs.txt", "a") as f:
    for i in res:
        line = json.dumps(i["_source"]) + "\n"
        f.write(line)