Adding a field base on others field

Elastic Stack Logstash
1

Hi,

I have field of a "operator" which consist a content of 5 digits string like :

62811
62812
62814
62817

I would like to add another field with name "operatorname" with the content is the mapping of above data.

e,g : 62811 --> is map to A, 62812 is map to A, 62814 is map to B, 62817 is map to C.

How I can achieved above objective in grok ?

2

Use a translate filter.

3

Thanks. It is working.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.