2 CSV with relationship

Elastic Stack Logstash
1

Hello,

I have 2 CSV files: 1 containing a list of countries and the second the list of cities of countries. These two files have a CountryId column that allows you to do the relationship.

After integrating the list of countries with Logstash, I would like to include the list of cities as an array in the existing list of countries.

Can you enlighten me on the procedure to follow in the logstash config to reach my goal?

Thank you

2

You could use the list of countries as a dictionary for a translate filter. You could then use aggregate to combine the cities for each country. If the list of cities is randomly order that would match example 3 in the documentation. If it is sorted by country id that would match example 4.