Dictionary for my events in Elasticsearch

[Sakshi_Aggarwal]

Currently I have the following scenario

I want to dynamically insert a dictionary that replaces the field name , for example, 128 to trade name and similarly others.
I have around 400 such fields.
So I cant hardcode every fieldname .
Suggest me a way to insert the dictinary dynamically.

Thanks,
Regards
Sakshi Aggarwal.

[Badger]

Interesting question! I would do that using ruby.

First, create a JSON dictionary that contains the mapping of field names. For example:

{
"1": "TradeName",
"2": "Foo",
"3": "bar"
}

Then use a ruby filter to do the lookups

    ruby {
        init => '@d = JSON.parse( File.read( "/path/to/dictionary.json" ) )'
        code => '
            event.to_hash.each { |k, v|
                if @d.has_key?(k)
                    event.set(@d[k], v)
                    event.remove(k)
                end
            }
        '
    }

Error handling is left as an exercise for the reader.