Database request

[Justin_V (Justin Vancutsem)]

Hello,

I didn't find the answer in other topics, so I post a new one.
Here's the thing : In my logs, I have some id's, who are totally not representative of what they are exactly.
So my question is : After having "grokked" the logs, is it possible to query a database with the value of created fields ?
If yes, I suppose that creating new field with the answer is not always funny with the types of return, right ?

If someone can enlighten me on the fact that it is possible, or not.

Thank you in advance

[magnusbaeck (Magnus Bäck)]

I think the translate and elasticsearch filters are the ones closest to what you need.

[Wayne_Taylor]

Hi Justin_V I just achieved something similar with a dictionary path yaml file using translate. See the following thread I where I was finally able to get this all working:

Need some help with Geo Enrichment - SOLVED

Really need some help warkolm, banging my head on this one Here is what I've been able to do thus far: Add in a filter mutate to split airport by the ',' so we now have an array from the string containing the latitude and longitude Add in a filter mutate to add the fields called latitude and longitude defined as airport[0] and airport[1] Then add in a filter mutate to convert them from string which is what natively is happening into a float In filter mutate name the longitude and l…

[Justin_V (Justin Vancutsem)]

Thanks for the propositions, I will try these.