Database request


I didn't find the answer in other topics, so I post a new one.
Here's the thing : In my logs, I have some id's, who are totally not representative of what they are exactly.
So my question is : After having "grokked" the logs, is it possible to query a database with the value of created fields ?
If yes, I suppose that creating new field with the answer is not always funny with the types of return, right ?

If someone can enlighten me on the fact that it is possible, or not.

Thank you in advance

I think the translate and elasticsearch filters are the ones closest to what you need.

1 Like

Hi Justin_V I just achieved something similar with a dictionary path yaml file using translate. See the following thread I where I was finally able to get this all working:

1 Like

Thanks for the propositions, I will try these.