# Any alternatives to if and mutate?
**URL:** https://discuss.elastic.co/t/any-alternatives-to-if-and-mutate/48109
**Category:** Logstash
**Created:** [April 21, 2016, 11:04pm UTC](https://discuss.elastic.co/t/any-alternatives-to-if-and-mutate/48109 "2016-04-21T23:04:22Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@anhlqn](https://discuss.elastic.co/u/anhlqn)
#### Post date: [April 21, 2016, 11:04pm UTC](https://discuss.elastic.co/t/any-alternatives-to-if-and-mutate/48109/1 "2016-04-21T23:04:22Z")
Hi all,
I have a bunch of `if + mutate` that check dst-port field and then update the protocol field to a correct protocol name ( for custom destination port that cannot be recognized by nProbe)
```auto
filter {
if [dst-port] == 5601 {
mutate {
update => { "protocol" => "Kibana" }
}
}
if [dst-port] == 9200 {
mutate {
update => { "protocol" => "Elasticsearch" }
}
}
}
```
Problem is that with about 10 **if** blocks, Logstash throughput significantly drops. Because netflow uses indexing time as the timestamp, throughput drop is not acceptable. I've looked at the mutate filter itself, but is there any better way to accomplish such check and rename operation?
Thanks
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [April 22, 2016, 5:58am UTC](https://discuss.elastic.co/t/any-alternatives-to-if-and-mutate/48109/2 "2016-04-22T05:58:32Z")
The translate filter?
---
### Author:  [@anhlqn](https://discuss.elastic.co/u/anhlqn)
#### Post date: [April 22, 2016, 6:35am UTC](https://discuss.elastic.co/t/any-alternatives-to-if-and-mutate/48109/3 "2016-04-22T06:35:50Z")
I'll try the translate filter. I forgot to use if + else if, I guess it would somewhat reduce the performance impact
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:01am UTC](https://discuss.elastic.co/t/any-alternatives-to-if-and-mutate/48109/4 "2017-07-06T05:01:10Z")