Add new field base on existing filed

I need extract a field from log file, then take this field to query DB (or redis or whatever a service I write), then add this result as a new field.

which filter should I use? or I have to write my own plugin?

The new jdbc_streaming filter is probably the best option.

Thank you Magnus, after some dig around, I decide to use translate filter, the dictionary file which translate need, I will write a service watch db change, then generate period.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.