# Check if value is 'null' So it Can Be Used in a Fingerprint and Document \_id

**URL:** <https://discuss.elastic.co/t/check-if-value-is-null-so-it-can-be-used-in-a-fingerprint-and-document-id/326632>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [February 27, 2023, 9:00pm UTC](https://discuss.elastic.co/t/check-if-value-is-null-so-it-can-be-used-in-a-fingerprint-and-document-id/326632 "2023-02-27T21:00:02Z")\
**Posts on this page:** 1\
**Showing post:** 13

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [March 1, 2023, 2:53am UTC](https://discuss.elastic.co/t/check-if-value-is-null-so-it-can-be-used-in-a-fingerprint-and-document-id/326632/13 "2023-03-01T02:53:21Z")

</div>

> [@iFamZ](#):
>
> Awesome, so the script processor is the way to go - the other processors cannot check if a value is `null`?

Does not seem so plus your whole `if / then` syntax was incorrect.

The next thing you will run into is you can't just set the index name you need to look at that solution I posted there are a number of other settings you need.

Can't just do this without the template stuff i showed [here](https://discuss.elastic.co/t/filebeat-and-updating-existing-docs/320781/20)

```auto
  hosts: ["localhost"]
  index: "test_index"
  username: "elastic"
  password: "password"

```

---

_[View the full topic](https://discuss.elastic.co/t/check-if-value-is-null-so-it-can-be-used-in-a-fingerprint-and-document-id/326632)._