Customer id


I am indexing logdata in elasticsearch with a string like "customerid=1234". I have a csv/database with relations between a customer-name and the customerid. Could I add a field automatically so the customers name gets sent as a field to elasticsearch along with the rest of the data?

(Christian Dahlqvist) #2

If you can transform the file with the additional customer data into a YAML file, you should be able to use the translate plugin to enrich the events based on the customer id.


Tried it out, and it works great :slight_smile: Thanks!

(system) #4