# Enriching logs with data from Elasticsearch (logstash-filter-elasticsearch)

**URL:** <https://discuss.elastic.co/t/enriching-logs-with-data-from-elasticsearch-logstash-filter-elasticsearch/81325>\
**Category:** Logstash\
**Created:** [April 5, 2017, 3:10pm UTC](https://discuss.elastic.co/t/enriching-logs-with-data-from-elasticsearch-logstash-filter-elasticsearch/81325 "2017-04-05T15:10:32Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [April 5, 2017, 3:19pm UTC](https://discuss.elastic.co/t/enriching-logs-with-data-from-elasticsearch-logstash-filter-elasticsearch/81325/2 "2017-04-05T15:19:35Z")

</div>

If the data is semi-static, you might be able to do this based on an in-memory translation as described in [this thread](https://discuss.elastic.co/t/create-custom-geoip-database-for-logstash-5-2/79473/6), which should be a lot faster.

---

_[View the full topic](https://discuss.elastic.co/t/enriching-logs-with-data-from-elasticsearch-logstash-filter-elasticsearch/81325)._