Customer id


#1

I am indexing logdata in elasticsearch with a string like "customerid=1234". I have a csv/database with relations between a customer-name and the customerid. Could I add a field automatically so the customers name gets sent as a field to elasticsearch along with the rest of the data?


(Christian Dahlqvist) #2

If you can transform the file with the additional customer data into a YAML file, you should be able to use the translate plugin to enrich the events based on the customer id.


#3

Tried it out, and it works great :slight_smile: Thanks!


(system) #4