I need to get a value in each document which is a calculation based on some other metricbeat feilds. The problem is that I can't use scripted fields because I don't need it for visualization/Kibana but accessing those values via perl or python DSL. I was looking for add_fields processor, however it looks it can use only static definitions. An example for values I need - CPU % usage (e.g. in scripted fields it would be doc['system.cpu.total.pct'].value * 100/doc['system.cpu.cores'].value)
You can achieve something similar doing some magic using an Ingest node https://www.elastic.co/guide/en/elasticsearch/reference/master/ingest.html
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.