I am indexing logdata in elasticsearch with a string like "customerid=1234". I have a csv/database with relations between a customer-name and the customerid. Could I add a field automatically so the customers name gets sent as a field to elasticsearch along with the rest of the data?
Christian_Dahlqvist (Christian Dahlqvist) #2
If you can transform the file with the additional customer data into a YAML file, you should be able to use the translate plugin to enrich the events based on the customer id.
Tried it out, and it works great Thanks!
system (system) #4