we have a need to enrich user data (e.g uid=19212012) coming from all applications to include additional data about user (e.g branch=xxx;region=yyy).
At first we wanted to use static jdbc in logstash, but security prohibited us to use that (complex reason to explain why ).
Wy have data needed for such enrichment in elasticsearch index.
Is there a way how to preprocess message to include data based on UID from another index?
Another option that would be acceptable is to enrich data during rollup jobs (if that's possible).