Is there a way to do enrichment of an area code. I am ingesting phone call data and would like to get more insights into the location (not provided within the actual data).
If you have a correspondance map/table, yes you could do something like this.
I wrote 3 blog posts related to enrichment, depending on "where" you want to do this:
Hope this could help.
2 Likes
Removed datastreams
Thanks @dadoonet !
So from my understanding I would need to supply the geo information through another index?
I assumed there was like a geo database that elastic might have.
Not for phone Numbers.
what about area codes? I was thinking of parsing out the area code from the phone number and doing geo analysis
Nothing related to phone numbers, including area codes AFAIK.
If you have such a database, you can build on the links I shared using indeed another index for lookups at index time.
1 Like
If you want to see exactly which fields are supported for each geo database type that we can handle, take a look at elasticsearch/modules/ingest-geoip/src/test/java/org/elasticsearch/ingest/geoip/MaxMindSupportTests.java at main · elastic/elasticsearch · GitHub. It's not the most user-friendly thing to read, but the things in *_SUPPORTED_FIELDS sets are the fields that are in geo databases that we support, and the *_UNSUPPORTED_FIELDS sets are the things that are in geo databases but that we do not support. As @dadoonet said, there is nothing related to phone numbers in those databases at all.
1 Like