Filebeat, replace fields from a dictionary

Elastic Stack Elasticsearch
1

Hello.
I have log file complex structure, for example:
{20191029084915,1,2}
Also I have a dictionary file:
{5,"AAA",1},
{5,"BBB",2},
{6,"CCC",1},
{6,"DDD",2},
I need to read the log file and realtime replace the fields from the dictionary.
The output should be:
{20191029084915,"AAA","DDD"}
Logstash has a filter translate {}, but how can I do this without a logstash, only filebeat, painless script and ingest_node?

2

I am moving this question to ES forum, as it is more of an Ingest node question than Filebeat.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.