Hello Elasticsearch Sorcerers, I am running Logstash v7.4.0 and Elasticsearch v7.4.0 in a nicely-working pipeline. My chain of fruit stores are sending my sales information to Logstash; Logstash then pushes that data to Elasticsearch. Here’s a subsample of my Elasticsearch fruit_sales index, plus…

For now, Logstash is indeed the better tool to do this. However, work is underway to allow you do this in Elasticsearch soon, using the new enrich processor that you can use with an enrich policy. The master branch of the documentation will give you a sneak peak of how this will work.

Discuss the Elastic Stack

How To Add a New Field, Then Populate It Based On Another Field's Value?

Elastic Stack Elasticsearch

redapplesonly (RAO) November 7, 2019, 12:43am 3

You are correct. I was able to solve this in Logstash; for anyone reading this post, see here.

Thanks!

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.